Records146All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical74CVSS 9.0–10.0
CVSS high66CVSS 7.0–8.9
Exploited now
Tendacn records in CISA KEVNo Tendacn vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 82
Tenda FH1201 v1.2.0.14 was discovered to contain a command injection vulnerability via the cmdinput parameter at /goform/exeCommand
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04571 · Published 2024-07-25 · No fix listed CWE-94
Priority HIGH 82
Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the mitInterface parameter in ip/goform/RouteStatic
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00572 · Published 2024-07-24 · No fix listed CWE-120
Priority HIGH 82
Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the list1 parameter at ip/goform/DhcpListClient.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00629 · Published 2024-07-24 · No fix listed CWE-787
Priority HIGH 76
Tenda FH1201 v1.2.0.14 was discovered to contain a command injection vulnerability via the mac parameter at ip/goform/WriteFacMac
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.06749 · Published 2024-07-25 · No fix listed CWE-78
Priority HIGH 76
Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the PPPOEPassword parameter at ip/goform/QuickIndex.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00611 · Published 2024-07-24 · No fix listed CWE-121
Priority HIGH 75
Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter at ip/goform/RouteStatic.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00572 · Published 2024-07-24 · No fix listed CWE-121
Priority HIGH 72
Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/NatStaticSetting.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00552 · Published 2024-07-24 · No fix listed CWE-121
Priority HIGH 72
Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter at ip/goform/setcfm.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00552 · Published 2024-07-24 · No fix listed CWE-121
Priority HIGH 66
Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the fromwebExcptypemanFilter function.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00553 · Published 2024-08-15 · No fix listed CWE-121
Priority HIGH 66
Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the PPW parameter in the fromWizardHandle function.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00553 · Published 2024-08-15 · No fix listed CWE-121
Priority HIGH 66
Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the qos parameter in the fromqossetting function.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00553 · Published 2024-08-15 · No fix listed CWE-121
Priority HIGH 66
Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the fromAddressNat function.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00682 · Published 2024-08-15 · No fix listed CWE-121
Priority HIGH 66
Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the frmL7ImForm function.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00682 · Published 2024-08-15 · No fix listed CWE-121
Priority HIGH 66
Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter at ip/goform/addressNat.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00522 · Published 2024-07-24 · No fix listed CWE-121
Priority HIGH 66
Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/DhcpListClient.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00552 · Published 2024-07-24 · No fix listed CWE-121
THREATIST.IORead the docs