CVE-2025-7549

🗓️ 13 Jul 2025 22:44:06Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 31 Views🌐 WEB

Critical vulnerability in Tenda FH1201 causes stack overflow in frmL7ProtForm, potentially exploitable remotely.

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of the frmL7ProtForm()/goform/L7Prot function in the microprogramming software for Tenda FH1201 allows a hacker to execute arbitrary code or cause service failures.	15 Jul 202500:00	–	bdu_fstec
Circl	CVE-2025-7549	9 Sep 202520:51	–	circl
CNNVD	Tenda FH1201 安全漏洞	13 Jul 202500:00	–	cnnvd
CNVD	Tenda FH1201 /goform/L7Prot File Buffer Overflow Vulnerability	18 Jul 202500:00	–	cnvd
Cvelist	CVE-2025-7549 Tenda FH1201 L7Prot frmL7ProtForm stack-based overflow	13 Jul 202522:44	–	cvelist
EUVD	EUVD-2025-21282	3 Oct 202520:07	–	euvd
NVD	CVE-2025-7549	13 Jul 202523:15	–	nvd
OSV	CVE-2025-7549	13 Jul 202523:15	–	osv
Positive Technologies	PT-2025-29393 · Tenda · Tenda Fh1201	11 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-7549	15 Jul 202523:16	–	redhatcve

NVD

Node

tenda fh1201_firmwareMatch1.2.0.14(408)

AND

tenda fh1201Match-

[
  {
    "vendor": "Tenda",
    "product": "FH1201",
    "versions": [
      {
        "version": "1.2.0.14(408)",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/panda666-888/vuls/blob/main/tenda/fh1201/frmL7ProtForm.md
github	www.github.com/panda666-888/vuls/blob/main/tenda/fh1201/frmL7ProtForm.md
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
tenda	www.tenda.com.cn/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
page	query param	goform/L7Prot	Stack-based buffer overflow in function frmL7Prot due to manipulation of the page parameter.	CWE-119, CWE-121

17 Jun 2026 10:05Current

8.9High risk

Vulners AI Score8.9

CVSS 48.7

CVSS 3.18.8

CVSS 29

CVSS 38.8

EPSS0.00761

SSVC