Exploitation Summary
EIP tracks 2 public exploits for CVE-2025-7795. PoCs published by Byte Reaper, byteReaper77.
AI-analyzed exploit summary This exploit demonstrates a stack-based buffer overflow in Tenda FH451 1.0.0.9 routers via an unauthenticated POST request to the /goform/fromP2pListFilter endpoint. It sends increasingly large payloads to trigger a crash and verifies the vulnerability by checking server responsiveness via ping.
Description
A vulnerability, which was classified as critical, has been found in Tenda FH451 1.0.0.9. Affected by this issue is the function fromP2pListFilter of the file /goform/P2pListFilter. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Exploits (2)
This exploit demonstrates a stack-based buffer overflow in Tenda FH451 1.0.0.9 routers via an unauthenticated POST request to the /goform/fromP2pListFilter endpoint. It sends increasingly large payloads to trigger a crash and verifies the vulnerability by checking server responsiveness via ping.
The repository contains a functional exploit for CVE-2025-7795, a buffer overflow vulnerability in Tenda routers. The exploit sends crafted POST requests to an unauthenticated endpoint, attempting to crash the device by overflowing a buffer with increasing payload sizes.
References (6)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H