CVE-2025-7794
Published: 18 July 2025
Summary
CVE-2025-7794 is a high-severity Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119) vulnerability in Tenda Fh451 Firmware. Its CVSS base score is 7.4 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 18.1% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-16 (Memory Protection).
Deeper analysis
CVE-2025-7794 is a critical stack-based buffer overflow vulnerability present in Tenda FH451 firmware version 1.0.0.9. It resides in the fromNatStaticSetting function of the /goform/NatStaticSetting endpoint and is triggered by unsanitized input supplied to the page argument, corresponding to CWE-119 and CWE-121.
The flaw can be exploited remotely by an authenticated attacker who supplies a crafted page value, resulting in high impact to confidentiality, integrity, and availability on the affected device. Public proof-of-concept code has been released that demonstrates the attack.
No official vendor advisory or patch information is referenced in the available sources. The EPSS score remains flat at 0.0157 with no material increase observed after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-21903
Vulnerability details
A vulnerability classified as critical was found in Tenda FH451 1.0.0.9. Affected by this vulnerability is the function fromNatStaticSetting of the file /goform/NatStaticSetting. The manipulation of the argument page leads to stack-based buffer overflow. The attack can be launched remotely.…
more
The exploit has been disclosed to the public and may be used.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Stack-based buffer overflow in router web form (fromNatStaticSetting) directly enables remote code execution against a public-facing network device interface.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly remediates the stack-based buffer overflow in the fromNatStaticSetting function by identifying, patching, and deploying firmware updates for the Tenda FH451.
Requires validation of the 'page' argument in /goform/NatStaticSetting to block malformed inputs that trigger the buffer overflow.
Deploys memory protections such as stack canaries and non-executable stacks to prevent arbitrary code execution from the stack buffer overflow.