Tenda WH450 V1.0.0.18 Stack Buffer Overflow in /goform/SetIpBind

Submission ID: 721216 Title Tenda WH450 V1.0.0.18 Stack-Based Buffer Overflow Description A buffer overflow vulnerability has been discovered in the Tenda WH450 router firmware version V1.0.0.18. The vulnerability exists in the /goform/SetIpBind HTTP request handler and can be exploited by an unauthenticated attacker to achieve arbitrary code execution or cause a denial-of-service condition. The vulnerability is triggered when processing requests containing the "page" parameter with excessive data length. Source ![](https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/Tenda_WH450/SetIpBind/SetIpBind.md) https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/Tenda_WH450/SetIpBind/SetIpBind.md User ![](https://user-images.githubusercontent.com/91218) z472421519 (UID 91218) z472421519 (UID 91218) Submission Date 12/21/2025 10:44 PM (13 days ago) Mediation Date 12/28/2025 09:29 AM (6 days later) Status ![](https://images.unsplash.com/photo-1636005393071-544-a159203a-0d7f-46c-59-996a438fdaa3?ixid=MXwxMjA3fDB8MHxwaG90by1wYWdlfHx8fGVufDB8fHw%3D&ixlib=rb-1.2.1&auto=format&fit=crop&w=500&q=60) Accepted VulDB Entry ![](https://images.unsplash.com/photo-1636005393071-544-a159203a-0d7f-46c-59-996a438fdaa3?ixid=MXwxMjA3fDB8MHxwaG90by1wYWdlfHx8fGVufDB8fHw%3D&ixlib=rb-1.2.1&auto=format&fit=crop&w=500&q=60) [338562] (Tenda WH450 1.0.0.18 HTTP Request /goform/SetIpBind Page Stack-Based Buffer Overflow) Points 19

Goal Reached Thanks to every supporter — we hit 100%!

Tenda WH450 V1.0.0.18 Stack Buffer Overflow in /goform/SetIpBind