CVE-2025-7506

🗓️ 12 Jul 2025 23:02:09Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 17 Views🌐 WEB

Critical vulnerability in Tenda FH451 allows remote stack-based overflow via HTTP POST Request Handler.

Reporter	Title	Published	Views	Family All 8
CNNVD	Tenda FH451 安全漏洞	12 Jul 202500:00	–	cnnvd
CNVD	Tenda FH451 /goform/Natlimit File Buffer Overflow Vulnerability	18 Jul 202500:00	–	cnvd
Cvelist	CVE-2025-7506 Tenda FH451 HTTP POST Request Natlimit fromNatlimit stack-based overflow	12 Jul 202523:02	–	cvelist
EUVD	EUVD-2025-21237	3 Oct 202520:07	–	euvd
NVD	CVE-2025-7506	12 Jul 202523:15	–	nvd
Positive Technologies	PT-2025-29350 · Tenda · Tenda Fh451	8 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-7506	14 Jul 202523:26	–	redhatcve
Vulnrichment	CVE-2025-7506 Tenda FH451 HTTP POST Request Natlimit fromNatlimit stack-based overflow	12 Jul 202523:02	–	vulnrichment

NVD

Vulners

Node

tenda fh451_firmwareMatch1.0.0.9

AND

tenda fh451Match-

[
  {
    "vendor": "Tenda",
    "product": "FH451",
    "versions": [
      {
        "version": "1.0.0.9",
        "status": "affected"
      }
    ],
    "modules": [
      "HTTP POST Request Handler"
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
tenda	www.tenda.com.cn/
github	www.github.com/zezhifu1/cve_report/blob/main/FH451/fromNatlimit.md
github	www.github.com/zezhifu1/cve_report/blob/main/FH451/fromNatlimit.md
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
page	request body	/goform/Natlimit	Stack-based buffer overflow in Natlimit via manipulated 'page' parameter in POST /goform/Natlimit (HTTP POST Request Handler); remote exploit disclosed.	CWE-119, CWE-121

15 Jul 2025 17:49Current

7.4High risk

Vulners AI Score7.4

CVSS 48.7

CVSS 3.18.8

CVSS 29

CVSS 38.8

EPSS0.00885

SSVC