Vulnerability · Published Dec 23, 2025 · Assigned by VulDB
CVE-2025-15048Tenda WH450 HTTP Request CheckTools command injection
High 7.3
In plain English
A high-severity command injection in WH450 from Tenda. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 12.3% (higher than 96% of all known vulnerabilities).
Severity (CVSS 3.1)7.3High
Exploit odds (30 days)12.3%top 3.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
A vulnerability was determined in Tenda WH450 1.0.0.18. This impacts an unknown function of the file /goform/CheckTools of the component HTTP Request Handler. Executing a manipulation of the argument ipaddress can lead to command injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.
Affected products (as reported)
Weakness: CWE-77, CWE-74 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
References
- VDB-337853 | Tenda WH450 HTTP Request CheckTools command injection vdb-entry, technical-description
- VDB-337853 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- Submit #720885 | Tenda WH450 V1.0.0.18 Command Injection third-party-advisory
- https://github.com/z472421519/BinaryAudit/blob/main/PoC/CMD/Tenda_WH450/CheckTools/CheckTools.md exploit
- https://github.com/z472421519/BinaryAudit/blob/main/PoC/CMD/Tenda_WH450/CheckTools/CheckTools.md#reproduce exploit
- https://www.tenda.com.cn/ product