Tenda WH450 安全漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://cloud.tencent.com/developer/article/2604877
• https://hisecure.hinet.net/secureinfo/popup2.php?cert_id=HiNet-2026-0003
• https://www.sentinelone.com/vulnerability-database/cve-2025-15008/
• https://nvd.nist.gov/vuln/detail/CVE-2025-15178
• https://nvd.nist.gov/vuln/detail/CVE-2025-15179
• https://www.sentinelone.com/vulnerability-database/cve-2025-14878/
• https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/Tenda_WH450/VirtualSer/VirtualSer.md
• https://cloud.tencent.com/developer/article/2604877
• https://www.cvedetails.com/cve/CVE-2025-14879/
• https://bitninja.com/blog/critical-security-flaw-in-tenda-wh450-exposes-servers/

Related Vulnerabilities

• 金和OA AttendWorkAttendance.aspx SQL注入漏洞
• Tenda CH22 安全漏洞
• Tenda WH450栈溢出漏洞（CVE-2025-15178）
• Tenda WH450 缓冲区溢出漏洞（CVE-2025-15164）
• Tenda CH22 路径遍历漏洞（CVE-2025-15076）
• （CVE-2025-15008）Tenda WH450 1.0.0.18 HTTP请求处理组件堆栈缓冲区溢出漏洞
• （CVE-2025-15007）腾达WH450 1.0.0.18 HTTP请求处理程序堆栈缓冲区溢出漏洞
• （CVE-2025-15006）Tenda WH450 1.0.0.18 HTTP请求处理器栈缓冲区溢出漏洞
• （CVE-2025-15010）腾达WH450 1.0.0.18 /goform/SafeUrlFilter栈缓冲区溢出漏洞
• （CVE-2025-11117）Tenda CH22 1.0.0.1缓冲区溢出漏洞
• （CVE-2025-9023）Tenda AC7和AC18缓冲区溢出漏洞
• PoCCVE-2020-10987: Tenda AC15 AC1900 version 15.03.05.19 - Command Injection
• PoCCVE-2021-31755: Tenda Router AC11 - Remote Command Injection