Fh1201 Firmware (Tenda) - vulnerabilities (CVEs)

37 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2026-03-29. Vendor: Tenda.

CVEs of Fh1201 Firmware

CVE-2026-5046 - CVSS 8.8 (high), 2026-03-29: A flaw has been found in Tenda FH1201 1.2.0.14(408). Affected is the function formWrlExtraSet of the file /goform/WrlExtraSet of the component Parameter…
CVE-2026-5045 - CVSS 8.8 (high), 2026-03-29: A vulnerability was detected in Tenda FH1201 1.2.0.14(408). This impacts the function WrlclientSet of the file /goform/WrlclientSet of the component Parameter…
CVE-2025-14995 - CVSS 8.8 (high), 2025-12-21: A vulnerability has been found in Tenda FH1201 1.2.0.14(408). Affected is the function sprintf of the file /goform/SetIpBind. Such manipulation of the…
CVE-2025-14994 - CVSS 8.8 (high), 2025-12-21: A flaw has been found in Tenda FH1201 and FH1206 1.2.0.14(408)/1.2.0.8(8155). This impacts the function strcat of the file /goform/webtypelibrary of the…
CVE-2025-7551 - CVSS 8.8 (high), 2025-07-14: A vulnerability was found in Tenda FH1201 1.2.0.14(408). It has been declared as critical. Affected by this vulnerability is the function fromPptpUserAdd of…
CVE-2025-7549 - CVSS 8.8 (high), 2025-07-13: A vulnerability was found in Tenda FH1201 1.2.0.14(408) and classified as critical. This issue affects the function frmL7ProtForm of the file /goform/L7Prot.…
CVE-2025-7548 - CVSS 8.8 (high), 2025-07-13: A vulnerability has been found in Tenda FH1201 1.2.0.14(408) and classified as critical. This vulnerability affects the function formSafeEmailFilter of the…
CVE-2025-7550 - CVSS 8.8 (high), 2025-07-13: A vulnerability was found in Tenda FH1201 1.2.0.14(408). It has been classified as critical. Affected is the function fromGstDhcpSetSer of the file…
CVE-2025-7468 - CVSS 8.8 (high), 2025-07-12: A vulnerability has been found in Tenda FH1201 1.2.0.14 and classified as critical. This vulnerability affects the function fromSafeUrlFilter of the file…
CVE-2025-7465 - CVSS 8.8 (high), 2025-07-12: A vulnerability classified as critical was found in Tenda FH1201 1.2.0.14. Affected by this vulnerability is the function fromRouteStatic of the file…
CVE-2025-7463 - CVSS 8.8 (high), 2025-07-12: A vulnerability was found in Tenda FH1201 1.2.0.14. It has been declared as critical. This vulnerability affects the function formWrlsafeset of the file…
CVE-2025-6110 - CVSS 8.8 (high), 2025-06-16: A vulnerability classified as critical has been found in Tenda FH1201 1.2.0.14(408). This affects an unknown part of the file /goform/SafeMacFilter. The…
CVE-2024-12002 - CVSS 6.5 (medium), 2024-11-30: A vulnerability classified as problematic was found in Tenda FH451, FH1201, FH1202 and FH1206 up to 20241129. Affected by this vulnerability is the function…
CVE-2024-44859 - CVSS 8 (high), 2024-09-04: Tenda FH1201 v1.2.0.14 has a stack buffer overflow vulnerability in `formWrlExtraGet`.
CVE-2024-42947 - CVSS 9.8 (critical), 2024-08-15: An issue in the handler function in /goform/telnet of Tenda FH1201 v1.2.0.14 (408) allows attackers to execute arbitrary commands via a crafted HTTP request.
CVE-2024-42950 - CVSS 7.5 (high), 2024-08-15: Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the Go parameter in the fromSafeClientFilter function. This vulnerability allows…
CVE-2024-42953 - CVSS 7.5 (high), 2024-08-15: Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the PPW parameter in the fromWizardHandle function. This vulnerability allows…
CVE-2024-42946 - CVSS 7.5 (high), 2024-08-15: Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the fromVirtualSer function. This vulnerability allows…
CVE-2024-42949 - CVSS 7.5 (high), 2024-08-15: Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the qos parameter in the fromqossetting function. This vulnerability allows…
CVE-2024-42952 - CVSS 7.5 (high), 2024-08-15: Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the fromqossetting function. This vulnerability allows…
CVE-2024-42955 - CVSS 7.5 (high), 2024-08-15: Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the fromSafeClientFilter function. This vulnerability allows…
CVE-2024-42945 - CVSS 7.5 (high), 2024-08-15: Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the fromAddressNat function. This vulnerability allows…
CVE-2024-42948 - CVSS 7.5 (high), 2024-08-15: Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the delno parameter in the fromPptpUserSetting function. This vulnerability allows…
CVE-2024-42951 - CVSS 7.5 (high), 2024-08-15: Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the mit_pptpusrpw parameter in the fromWizardHandle function. This vulnerability…
CVE-2024-42954 - CVSS 7.5 (high), 2024-08-15: Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the fromwebExcptypemanFilter function. This vulnerability…
CVE-2024-42944 - CVSS 7.5 (high), 2024-08-15: Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the fromNatlimit function. This vulnerability allows…
CVE-2024-42940 - CVSS 7.5 (high), 2024-08-15: Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the fromP2pListFilter function. This vulnerability allows…
CVE-2024-42943 - CVSS 7.5 (high), 2024-08-15: Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the PPPOEPassword parameter in the fromAdvSetWan function. This vulnerability…
CVE-2024-42942 - CVSS 7.5 (high), 2024-08-15: Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the frmL7ImForm function. This vulnerability allows…
CVE-2024-42941 - CVSS 7.5 (high), 2024-08-15: Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the wanmode parameter in the fromAdvSetWan function. This vulnerability allows…
CVE-2024-41473 - CVSS 9.8 (critical), 2024-07-25: Tenda FH1201 v1.2.0.14 was discovered to contain a command injection vulnerability via the mac parameter at ip/goform/WriteFacMac
CVE-2024-41460 - CVSS 9.8 (critical), 2024-07-24: Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter at ip/goform/RouteStatic.
CVE-2024-41465 - CVSS 7.5 (high), 2024-07-24: Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter at ip/goform/setcfm.
CVE-2024-41459 - CVSS 9.8 (critical), 2024-07-24: Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the PPPOEPassword parameter at ip/goform/QuickIndex.
CVE-2024-41463 - CVSS 7.5 (high), 2024-07-24: Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter at ip/goform/addressNat.
CVE-2024-41462 - CVSS 7.5 (high), 2024-07-24: Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/DhcpListClient.
CVE-2024-41466 - CVSS 7.5 (high), 2024-07-24: Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/NatStaticSetting.