Vulnerabilities

TI-2025-13677 CVE-2025-14994 · GHSA-hxpp-w5pc-mh6j

Tenda FH1201/FH1206 HTTP Request webtypelibrary strcat stack-based overflow

HIGH 73

A flaw has been found in Tenda FH1201 and FH1206 1.2.0.14(408)/1.2.0.8(8155).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00746 Published 2025-12-21 No fix listed CWE-119

TI-2024-11135 CVE-2024-12002 · GHSA-8f64-5gvc-rwm8

Tenda FH451/FH1201/FH1202/FH1206 GetIPTV websReadEvent null pointer dereference

LOW 26

A vulnerability classified as problematic was found in Tenda FH451, FH1201, FH1202 and FH1206 up to 20241129.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00804 Published 2024-11-30 No fix listed CWE-404

TI-2024-29884 CVE-2024-44390 · GHSA-h363-vrwv-gpwf

Tenda FH1206 V1.2.0.8(8155)_EN contains a Buffer Overflow vulnerability via the function formWrlsafeset.

HIGH 73

Tenda FH1206 V1.2.0.8(8155)_EN contains a Buffer Overflow vulnerability via the function formWrlsafeset.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00296 Published 2024-08-23 No fix listed CWE-121

TI-2024-29883 CVE-2024-44387 · GHSA-c23f-2mjw-h676

Tenda FH1206 V1.2.0.8(8155)_EN contains a Buffer Overflow vulnerability via the functino formWrlExtraGet.

MEDIUM 62

Tenda FH1206 V1.2.0.8(8155)_EN contains a Buffer Overflow vulnerability via the functino formWrlExtraGet.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00265 Published 2024-08-23 No fix listed CWE-121

TI-2024-29882 CVE-2024-44386 · GHSA-g3jm-x33w-9q5w

Tenda FH1206 V1.2.0.8(8155)_EN contains a Buffer Overflow vulnerability via the function fromSetIpBind.

HIGH 65

Tenda FH1206 V1.2.0.8(8155)_EN contains a Buffer Overflow vulnerability via the function fromSetIpBind.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00321 Published 2024-08-23 No fix listed CWE-121

TI-2024-28712 CVE-2024-42987 · GHSA-3p4h-pcqj-f7fx

Tenda FH1206 v02.03.01.35 was discovered to contain a stack-based buffer overflow…

HIGH 72

Tenda FH1206 v02.03.01.35 was discovered to contain a stack-based buffer overflow vulnerability in the fromPptpUserAdd function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01307 Published 2024-08-15 No fix listed CWE-787

TI-2024-28711 CVE-2024-42986 · GHSA-qffp-wwcx-j425

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the…

HIGH 72

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the PPPOEPassword parameter in the fromAdvSetWan function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00552 Published 2024-08-15 No fix listed CWE-787

TI-2024-28710 CVE-2024-42985 · GHSA-cprr-85rg-mjvr

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page…

HIGH 66

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromNatlimit function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00552 Published 2024-08-15 No fix listed CWE-121

TI-2024-28709 CVE-2024-42984 · GHSA-5m24-c4vx-fjj8

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page…

HIGH 66

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromP2pListFilter function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00552 Published 2024-08-15 No fix listed CWE-121

TI-2024-28708 CVE-2024-42983 · GHSA-wp6j-mqr7-v2hf

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the pptpPPW…

HIGH 66

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the pptpPPW parameter in the fromAdvSetWan function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00552 Published 2024-08-15 No fix listed CWE-121

TI-2024-28707 CVE-2024-42982 · GHSA-h7cf-jrwx-94cj

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page…

HIGH 66

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromVirtualSer function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00552 Published 2024-08-15 No fix listed CWE-121

TI-2024-28706 CVE-2024-42981 · GHSA-5wq9-96x8-3hq5

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the delno…

HIGH 72

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the delno parameter in the fromPptpUserSetting function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00552 Published 2024-08-15 No fix listed CWE-400

TI-2024-28705 CVE-2024-42980 · GHSA-f994-q776-gghm

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page…

HIGH 72

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the frmL7ImForm function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00552 Published 2024-08-15 No fix listed CWE-400

TI-2024-28704 CVE-2024-42979 · GHSA-xg38-j8ww-g8hg

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page…

HIGH 66

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the frmL7ProtForm function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00552 Published 2024-08-15 No fix listed CWE-121

TI-2024-28703 CVE-2024-42978 · GHSA-fj4q-r9h6-xhrg

An issue in the handler function in /goform/telnet of Tenda FH1206 v02.03.01.35 allows…

HIGH 82

An issue in the handler function in /goform/telnet of Tenda FH1206 v02.03.01.35 allows attackers to execute arbitrary commands via a crafted HTTP request.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0123 Published 2024-08-15 No fix listed CWE-78

TI-2024-28702 CVE-2024-42977 · GHSA-q967-hxp7-f2rc

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the qos…

HIGH 72

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the qos parameter in the fromqossetting function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00552 Published 2024-08-15 No fix listed CWE-787

TI-2024-28701 CVE-2024-42976 · GHSA-c75r-v5wg-3gmj

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page…

HIGH 66

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromSafeClientFilter function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00552 Published 2024-08-15 No fix listed CWE-121

TI-2024-28700 CVE-2024-42974 · GHSA-vv44-rh9q-4cc8

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page…

HIGH 66

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromwebExcptypemanFilter function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00552 Published 2024-08-15 No fix listed CWE-121

TI-2024-28699 CVE-2024-42973 · GHSA-xh57-2h8m-3798

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page…

HIGH 66

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromSetlpBind function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00553 Published 2024-08-15 No fix listed CWE-121

TI-2024-28698 CVE-2024-42969 · GHSA-6pr8-g9pq-xmj3

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page…

HIGH 72

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromSafeUrlFilter function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00553 Published 2024-08-15 No fix listed CWE-400

TI-2024-28697 CVE-2024-42968 · GHSA-j828-57c8-xr27

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the Go parameter…

HIGH 66

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the Go parameter in the fromSafeUrlFilter function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00553 Published 2024-08-15 No fix listed CWE-121

TI-2024-07146 CVE-2024-7707 · GHSA-gqg7-4h7v-f4hf

Tenda FH1206 HTTP POST Request SafeEmailFilter formSafeEmailFilter stack-based overflow

HIGH 73

A vulnerability was found in Tenda FH1206 02.03.01.35 and classified as critical.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01277 Published 2024-08-13 No fix listed CWE-121

TI-2024-07059 CVE-2024-7615 · GHSA-wg2h-7567-vcrf

Tenda FH1206 fromSafeUrlFilter stack-based overflow

HIGH 73

A vulnerability was found in Tenda FH1206 1.2.0.8.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01467 Published 2024-08-08 No fix listed CWE-121

TI-2024-07058 CVE-2024-7614 · GHSA-c769-hhrx-qp4m

Tenda FH1206 qossetting fromqossetting stack-based overflow

HIGH 71

A vulnerability was found in Tenda FH1206 1.2.0.8(8155).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01467 Published 2024-08-08 No fix listed CWE-121

TI-2024-07057 CVE-2024-7613 · GHSA-h2w6-mvpr-jj72

Tenda FH1206 GstDhcpSetSer fromGstDhcpSetSer buffer overflow

HIGH 73

A vulnerability was found in Tenda FH1206 1.2.0.8(8155) and classified as critical.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01467 Published 2024-08-08 No fix listed CWE-120

Vulnerabilities

Filters