CVE-2025-5978

🗓️ 10 Jun 2025 20:31:07Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 85 Views🌐 WEB

Critical stack-based overflow in Tenda FH1202 VirtualSer allows remote exploitation.

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	Tenda FH1202 fromVirtualSer Function Use-After-Free	25 Aug 202500:00	–	bdu_fstec
Circl	CVE-2025-5978	10 Jun 202521:32	–	circl
CNNVD	Tenda FH1202 security vulnerabilities	10 Jun 202500:00	–	cnnvd
CNVD	Tenda FH1202 Buffer Overflow Vulnerability	13 Jun 202500:00	–	cnvd
Cvelist	CVE-2025-5978 Tenda FH1202 VirtualSer fromVirtualSer stack-based overflow	10 Jun 202520:31	–	cvelist
EUVD	EUVD-2025-17834	3 Oct 202520:07	–	euvd
NVD	CVE-2025-5978	10 Jun 202521:15	–	nvd
osv_cve	CVE-2025-5978	10 Jun 202521:15	–	osv_cve
Positive Technologies	PT-2025-24934 · Tenda · Tenda Fh1202	10 Jun 202500:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2025-5978: Stack-based Buffer Overflow	10 Jun 202500:00	–	rapid7

NVD

Vulners

Node

AND

tenda fh1202_firmwareMatch1.2.0.14(408)

tenda fh1202Match-

[
  {
    "vendor": "Tenda",
    "product": "FH1202",
    "versions": [
      {
        "version": "1.2.0.14",
        "status": "affected"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
tenda	www.tenda.com.cn/
lavender-bicycle-a5a	www.lavender-bicycle-a5a.notion.site/Tenda-FH1202-fromVirtualSer-20b53a41781f80b7a6c7e727f93d7d9f
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
lavender-bicycle-a5a	www.lavender-bicycle-a5a.notion.site/Tenda-FH1202-fromVirtualSer-20b53a41781f80b7a6c7e727f93d7d9f

Parameter	Position	Path	Description	CWE
page	path	/goform/VirtualSer	A stack-based buffer overflow exists in the VirtualSer function when processing the 'page' argument, potentially allowing remote code execution.	CWE-119, CWE-121, CWE-787

17 Jun 2026 09:49Current

8.6High risk

Vulners AI Score8.6

CVSS 48.7

CVSS 3.18.8

CVSS 38.8

CVSS 29

EPSS0.01038

SSVC

tenda fh1202 vulnerability stack-based overflow remote exploitation critical vulnerability public disclosure