CVE-2025-7551 Information

Jul 15, 2025 cve

Description

A vulnerability was found in Tenda FH1201 1.2.0.14(408). It has been declared as critical. Affected by this vulnerability is the function fromPptpUserAdd of the file /goform/PPTPDClient. The manipulation of the argument modino/username leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Reference

https://github.com/panda666-888/vuls/blob/main/tenda/fh1201/fromPptpUserAdd_modino.md#poc https://vuldb.com/?ctiid.316249 https://vuldb.com/?id.316249 https://vuldb.com/?submit.614975 https://vuldb.com/?submit.614976 https://www.tenda.com.cn/ https://github.com/panda666-888/vuls/blob/main/tenda/fh1201/fromPptpUserAdd_modino.md https://github.com/panda666-888/vuls/blob/main/tenda/fh1201/fromPptpUserAdd_modino.md#poc https://github.com/panda666-888/vuls/blob/main/tenda/fh1201/fromPptpUserAdd_modino.md

CNNVD-202507-1797 (Published: 2025-07-13)

Share on: