CVE-2025-15046

CVE-2025-15046 affects Tenda WH450 (firmware 1.0.0.18). The vulnerability lies in the HTTP Request Handler’s /goform/PPTPClient function, where manipulating the netmsk argument causes a stack-based buffer overflow. It can be exploited remotely, and public PoCs/exploits are described in the cited ...