Tenda WH450 Firmware vulnerabilities

21 CVEs affecting Tenda WH450 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-15180, published 2025-12-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-15048, published 2025-12-23. Critical severity, CVSS 9.8. EPSS: 12.3% chance of exploitation in the next 30 days. A vulnerability was determined in Tenda WH450 1.0.0.18. This impacts an unknown function of the file /goform/CheckTools of the component HTTP Request Handler. Executing a manipulation of the argument…
CVE-2025-14879, published 2025-12-18. Critical severity, CVSS 9.8. EPSS: 6.7% chance of exploitation in the next 30 days. A weakness has been identified in Tenda WH450 1.0.0.18. Affected is an unknown function of the file /goform/onSSIDChange of the component HTTP Request Handler. This manipulation of the argument…
CVE-2025-15047, published 2025-12-23. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability was found in Tenda WH450 1.0.0.18. This affects an unknown function of the file /goform/PPTPDClient of the component HTTP Request Handler. Performing a manipulation of the argument…
CVE-2025-15180, published 2025-12-29. High severity, CVSS 7.2. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability was identified in Tenda WH450 1.0.0.18. The affected element is an unknown function of the file /goform/webExcptypemanFilte of the component HTTP Request Handler. Such manipulation of…
CVE-2025-15161, published 2025-12-28. High severity, CVSS 7.2. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability was found in Tenda WH450 1.0.0.18. Affected is an unknown function of the file /goform/PPTPUserSetting. Performing a manipulation of the argument delno results in stack-based buffer…
CVE-2025-15046, published 2025-12-23. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability has been found in Tenda WH450 1.0.0.18. The impacted element is an unknown function of the file /goform/PPTPClient of the component HTTP Request Handler. Such manipulation of the…
CVE-2025-15045, published 2025-12-23. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. A flaw has been found in Tenda WH450 1.0.0.18. The affected element is an unknown function of the file /goform/Natlimit of the component HTTP Request Handler. This manipulation of the argument page…
CVE-2025-15044, published 2025-12-23. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability was detected in Tenda WH450 1.0.0.18. Impacted is an unknown function of the file /goform/NatStaticSetting. The manipulation of the argument page results in stack-based buffer…
CVE-2025-15010, published 2025-12-22. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability has been found in Tenda WH450 1.0.0.18. This issue affects some unknown processing of the file /goform/SafeUrlFilter. The manipulation of the argument page leads to stack-based buffer…
CVE-2025-15007, published 2025-12-22. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. A security vulnerability has been detected in Tenda WH450 1.0.0.18. Affected by this issue is some unknown functionality of the file /goform/L7Im of the component HTTP Request Handler. Such…

Latest

CVE-2025-15179, published 2025-12-29. High severity, CVSS 7.2. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability was determined in Tenda WH450 1.0.0.18. Impacted is an unknown function of the file /goform/qossetting. This manipulation of the argument page causes stack-based buffer overflow. The…
CVE-2025-15178, published 2025-12-29. High severity, CVSS 7.2. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability was found in Tenda WH450 1.0.0.18. This issue affects some unknown processing of the file /goform/VirtualSer of the component HTTP Request Handler. The manipulation of the argument…
CVE-2025-15177, published 2025-12-29. High severity, CVSS 7.2. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability has been found in Tenda WH450 1.0.0.18. This vulnerability affects unknown code of the file /goform/SetIpBind of the component HTTP Request Handler. The manipulation of the argument…
CVE-2025-15164, published 2025-12-29. High severity, CVSS 7.2. EPSS: 0.8% chance of exploitation in the next 30 days. A security flaw has been discovered in Tenda WH450 1.0.0.18. This affects an unknown part of the file /goform/SafeMacFilter. The manipulation of the argument page results in stack-based buffer…
CVE-2025-15163, published 2025-12-29. High severity, CVSS 7.2. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability was identified in Tenda WH450 1.0.0.18. Affected by this issue is some unknown functionality of the file /goform/SafeEmailFilter. The manipulation of the argument page leads to…
CVE-2025-15162, published 2025-12-29. High severity, CVSS 7.2. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability was determined in Tenda WH450 1.0.0.18. Affected by this vulnerability is an unknown functionality of the file /goform/RouteStatic. Executing a manipulation of the argument page can…
CVE-2025-15160, published 2025-12-28. High severity, CVSS 7.2. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability has been found in Tenda WH450 1.0.0.18. This impacts an unknown function of the file /goform/PPTPServer. Such manipulation of the argument ip1 leads to stack-based buffer overflow.…