Priority HIGH 82
An issue in the handler function in /goform/telnet of Tenda FH1206 v02.03.01.35 allows attackers to execute arbitrary commands via a crafted HTTP request.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0123 · Published 2024-08-15 · No fix listed CWE-78
Priority HIGH 82
Tenda FH1206 V1.2.0.8(8155) was discovered to contain a command injection vulnerability via the mac parameter at ip/goform/WriteFacMac.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0184 · Published 2024-05-24 · No fix listed CWE-94
Priority HIGH 82
Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the PPW parameter at ip/goform/WizardHandle.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00902 · Published 2024-05-10 · No fix listed CWE-120
Priority HIGH 82
Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/NatStaticSetting.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00936 · Published 2024-05-10 · No fix listed CWE-121
Priority HIGH 79
A vulnerability was found in Tenda FH1206 1.2.0.8(8155) and classified as critical.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01575 · Published 2024-04-20 · No fix listed CWE-120
Priority HIGH 78
Tenda FH1206 V1.2.0.8(8155) was discovered to contain a command injection vulnerability via the cmdinput parameter at ip/goform/formexeCommand.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01791 · Published 2024-05-24 · No fix listed CWE-77
Priority HIGH 74
Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the page parameter in ip/goform/addressNat.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00626 · Published 2024-04-23 · No fix listed CWE-121
Priority HIGH 73
A flaw has been found in Tenda FH1201 and FH1206 1.2.0.14(408)/1.2.0.8(8155).
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00746 · Published 2025-12-21 · No fix listed CWE-119
Priority HIGH 73
Tenda FH1206 V1.2.0.8(8155)_EN contains a Buffer Overflow vulnerability via the function formWrlsafeset.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00296 · Published 2024-08-23 · No fix listed CWE-121
Priority HIGH 73
Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter at ip/goform/exeCommand.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.009 · Published 2024-05-10 · No fix listed CWE-121
Priority HIGH 73
Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter in ip/goform/setcfm.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00661 · Published 2024-04-23 · No fix listed CWE-121
Priority HIGH 73
A vulnerability was found in Tenda FH1206 02.03.01.35 and classified as critical.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.01277 · Published 2024-08-13 · No fix listed CWE-121
Priority HIGH 73
A vulnerability was found in Tenda FH1206 1.2.0.8.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.01467 · Published 2024-08-08 · No fix listed CWE-121
Priority HIGH 73
A vulnerability was found in Tenda FH1206 1.2.0.8(8155) and classified as critical.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.01467 · Published 2024-08-08 · No fix listed CWE-120
Priority HIGH 72
Tenda FH1206 v02.03.01.35 was discovered to contain a stack-based buffer overflow vulnerability in the fromPptpUserAdd function.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01307 · Published 2024-08-15 · No fix listed CWE-787
Priority HIGH 72
Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the PPPOEPassword parameter in the fromAdvSetWan function.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00552 · Published 2024-08-15 · No fix listed CWE-787
Priority HIGH 72
Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the delno parameter in the fromPptpUserSetting function.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00552 · Published 2024-08-15 · No fix listed CWE-400
Priority HIGH 72
Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the frmL7ImForm function.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00552 · Published 2024-08-15 · No fix listed CWE-400
Priority HIGH 72
Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the qos parameter in the fromqossetting function.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00552 · Published 2024-08-15 · No fix listed CWE-787
Priority HIGH 72
Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromSafeUrlFilter function.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00553 · Published 2024-08-15 · No fix listed CWE-400
Priority HIGH 71
A vulnerability was found in Tenda FH1206 1.2.0.8(8155).
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.01467 · Published 2024-08-08 · No fix listed CWE-121
Priority HIGH 66
Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromNatlimit function.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00552 · Published 2024-08-15 · No fix listed CWE-121
Priority HIGH 66
Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromP2pListFilter function.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00552 · Published 2024-08-15 · No fix listed CWE-121
Priority HIGH 66
Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the pptpPPW parameter in the fromAdvSetWan function.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00552 · Published 2024-08-15 · No fix listed CWE-121
Priority HIGH 66
Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromVirtualSer function.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00552 · Published 2024-08-15 · No fix listed CWE-121
Load more
THREATIST.IORead the docs