Fh1202 Firmware (Tenda) - vulnerabilities (CVEs)

64 CVEs, 0 in the last 30 days, 8 known versions, newest CVE from 2026-04-26. Vendor: Tenda.

CVEs of Fh1202 Firmware

CVE-2026-7035 - CVSS 8.8 (high), 2026-04-26: A vulnerability was determined in Tenda FH1202 1.2.0.14. This affects the function fromWrlclientSet of the file /goform/WrlclientSet of the component httpd.…
CVE-2026-7034 - CVSS 8.8 (high), 2026-04-26: A vulnerability was found in Tenda FH1202 1.2.0.14(408). Affected by this issue is the function WrlExtraSet of the file /goform/WrlExtraSet of the component…
CVE-2026-3811 - CVSS 8.8 (high), 2026-03-09: A vulnerability was found in Tenda FH1202 1.2.0.14(408). This impacts the function fromP2pListFilter of the file /goform/P2pListFilter. The manipulation of…
CVE-2026-3810 - CVSS 8.8 (high), 2026-03-09: A vulnerability has been found in Tenda FH1202 1.2.0.14(408). This affects the function fromDhcpListClient of the file /goform/DhcpListClient. The…
CVE-2026-3809 - CVSS 8.8 (high), 2026-03-09: A flaw has been found in Tenda FH1202 1.2.0.14(408). The impacted element is the function fromNatStaticSetting of the file /goform/NatSaticSetting. Executing…
CVE-2026-3808 - CVSS 8.8 (high), 2026-03-09: A vulnerability was detected in Tenda FH1202 1.2.0.14(408). The affected element is the function formWebTypeLibrary of the file /goform/webtypelibrary.…
CVE-2026-3807 - CVSS 8.8 (high), 2026-03-09: A security vulnerability has been detected in Tenda FH1202 1.2.0.14(408). Impacted is the function formWrlsafeset of the file /goform/AdvSetWrlsafeset. Such…
CVE-2025-7532 - CVSS 8.8 (high), 2025-07-13: A vulnerability has been found in Tenda FH1202 1.2.0.14(408) and classified as critical. This vulnerability affects the function fromwebExcptypemanFilter of…
CVE-2025-7531 - CVSS 8.8 (high), 2025-07-13: A vulnerability, which was classified as critical, was found in Tenda FH1202 1.2.0.14(408). This affects the function fromPptpUserSetting of the file…
CVE-2025-7530 - CVSS 8.8 (high), 2025-07-13: A vulnerability, which was classified as critical, has been found in Tenda FH1202 1.2.0.14(408). Affected by this issue is the function fromPptpUserAdd of the…
CVE-2025-7529 - CVSS 8.8 (high), 2025-07-13: A vulnerability classified as critical was found in Tenda FH1202 1.2.0.14(408). Affected by this vulnerability is the function fromNatlimit of the file…
CVE-2025-7528 - CVSS 8.8 (high), 2025-07-13: A vulnerability classified as critical has been found in Tenda FH1202 1.2.0.14(408). Affected is the function fromGstDhcpSetSer of the file…
CVE-2025-7527 - CVSS 8.8 (high), 2025-07-13: A vulnerability was found in Tenda FH1202 1.2.0.14(408). It has been rated as critical. This issue affects the function fromAdvSetWan of the file…
CVE-2025-5978 - CVSS 8.8 (high), 2025-06-10: A vulnerability was found in Tenda FH1202 1.2.0.14. It has been classified as critical. Affected is the function fromVirtualSer of the file…
CVE-2025-3237 - CVSS 6.9 (medium), 2025-04-04: A vulnerability was found in Tenda FH1202 1.2.0.14(408). It has been rated as critical. This issue affects some unknown processing of the file…
CVE-2025-3236 - CVSS 6.9 (medium), 2025-04-04: A vulnerability was found in Tenda FH1202 1.2.0.14(408). It has been declared as critical. This vulnerability affects unknown code of the file…
CVE-2025-2996 - CVSS 6.9 (medium), 2025-03-31: A vulnerability was found in Tenda FH1202 1.2.0.14(408) and classified as critical. This issue affects some unknown processing of the file /goform/SysToolDDNS…
CVE-2025-2995 - CVSS 6.9 (medium), 2025-03-31: A vulnerability has been found in Tenda FH1202 1.2.0.14(408) and classified as critical. This vulnerability affects unknown code of the file…
CVE-2025-2993 - CVSS 6.9 (medium), 2025-03-31: A vulnerability, which was classified as critical, has been found in Tenda FH1202 1.2.0.14(408). Affected by this issue is some unknown functionality of the…
CVE-2025-2994 - CVSS 6.9 (medium), 2025-03-31: A vulnerability, which was classified as critical, was found in Tenda FH1202 1.2.0.14(408). This affects an unknown part of the file /goform/qossetting of the…
CVE-2025-2992 - CVSS 6.9 (medium), 2025-03-31: A vulnerability classified as critical was found in Tenda FH1202 1.2.0.14(408). Affected by this vulnerability is an unknown functionality of the file…
CVE-2025-2991 - CVSS 6.9 (medium), 2025-03-31: A vulnerability classified as critical has been found in Tenda FH1202 1.2.0.14(408). Affected is an unknown function of the file /goform/AdvSetWrlmacfilter of…
CVE-2025-2989 - CVSS 6.9 (medium), 2025-03-31: A vulnerability was found in Tenda FH1202 1.2.0.14(408). It has been declared as critical. This vulnerability affects unknown code of the file…
CVE-2025-2990 - CVSS 6.9 (medium), 2025-03-31: A vulnerability was found in Tenda FH1202 1.2.0.14(408). It has been rated as critical. This issue affects some unknown processing of the file…
CVE-2024-12002 - CVSS 6.5 (medium), 2024-11-30: A vulnerability classified as problematic was found in Tenda FH451, FH1201, FH1202 and FH1206 up to 20241129. Affected by this vulnerability is the function…
CVE-2024-32302 - CVSS 6.3 (medium), 2024-04-17: Tenda FH1202 v1.2.0.14(408) firmware has a stack overflow vulnerability via the PPW parameter in the fromWizardHandle function.
CVE-2024-32315 - CVSS 4.7 (medium), 2024-04-17: Tenda FH1202 v1.2.0.14(408) firmware has a stack overflow vulnerability via the adslPwd parameter in the formWanParameterSetting function.
CVE-2024-32282 - CVSS 6.3 (medium), 2024-04-17: Tenda FH1202 v1.2.0.14(408) firmware contains a command injection vulnerablility in the formexeCommand function via the cmdinput parameter.
CVE-2024-30636 - CVSS 6.5 (medium), 2024-03-29: Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability via the PPPOEPassword parameter in the formQuickIndex function.
CVE-2024-30586 - CVSS 6.5 (medium), 2024-03-28: Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the security_5g parameter of the formWifiBasicSet function.
CVE-2024-30589 - CVSS 9.8 (critical), 2024-03-28: Tenda FH1202 v1.2.0.14(408) firmware has a stack overflow vulnerability in the entrys parameter of the fromAddressNat function.
CVE-2024-30592 - CVSS 8 (high), 2024-03-28: Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the page parameter of the fromAddressNat function.
CVE-2024-30585 - CVSS 6.5 (medium), 2024-03-28: Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the deviceId parameter of the saveParentControlInfo function.
CVE-2024-30588 - CVSS 4.3 (medium), 2024-03-28: Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the schedStartTime parameter of the setSchedWifi function.
CVE-2024-30591 - CVSS 8.8 (high), 2024-03-28: Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the time parameter of the saveParentControlInfo function.
CVE-2024-30584 - CVSS 9.8 (critical), 2024-03-28: Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the security parameter of the formWifiBasicSet function.
CVE-2024-30587 - CVSS 9.8 (critical), 2024-03-28: Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the urls parameter of the saveParentControlInfo function.
CVE-2024-30590 - CVSS 6.5 (medium), 2024-03-28: Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the schedEndTime parameter of the setSchedWifi function.
CVE-2024-30583 - CVSS 8 (high), 2024-03-28: Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the mitInterface parameter of the fromAddressNat function.
CVE-2024-30596 - CVSS 9.8 (critical), 2024-03-28: Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the deviceId parameter of the formSetDeviceName function.
CVE-2024-30594 - CVSS 6.5 (medium), 2024-03-28: Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the deviceMac parameter of the addWifiMacFilter function.
CVE-2024-30593 - CVSS 9.8 (critical), 2024-03-28: Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability located in the deviceName parameter of the formSetDeviceName function.
CVE-2024-30595 - CVSS 9.8 (critical), 2024-03-28: Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the deviceId parameter of the addWifiMacFilter function.
CVE-2024-2985 - CVSS 8.8 (high), 2024-03-27: A vulnerability was found in Tenda FH1202 1.2.0.14(408). It has been declared as critical. This vulnerability affects the function formQuickIndex of the file…
CVE-2024-2987 - CVSS 8.8 (high), 2024-03-27: A vulnerability classified as critical has been found in Tenda FH1202 1.2.0.14(408). Affected is the function GetParentControlInfo of the file…
CVE-2024-2986 - CVSS 8.8 (high), 2024-03-27: A vulnerability was found in Tenda FH1202 1.2.0.14(408). It has been rated as critical. This issue affects the function formSetSpeedWan of the file…
CVE-2024-2982 - CVSS 8.8 (high), 2024-03-27: A vulnerability has been found in Tenda FH1202 1.2.0.14(408) and classified as critical. Affected by this vulnerability is the function formWriteFacMac of the…
CVE-2024-2984 - CVSS 8.8 (high), 2024-03-27: A vulnerability was found in Tenda FH1202 1.2.0.14(408). It has been classified as critical. This affects the function formSetCfm of the file /goform/setcfm.…
CVE-2024-2983 - CVSS 8.8 (high), 2024-03-27: A vulnerability was found in Tenda FH1202 1.2.0.14(408) and classified as critical. Affected by this issue is the function formSetClientState of the file…
CVE-2024-2981 - CVSS 8.8 (high), 2024-03-27: A vulnerability, which was classified as critical, was found in Tenda FH1202 1.2.0.14(408). Affected is the function form_fast_setting_wifi_set of the file…
CVE-2024-2980 - CVSS 8.8 (high), 2024-03-27: A vulnerability, which was classified as critical, has been found in Tenda FH1202 1.2.0.14(408). This issue affects the function formexeCommand of the file…
CVE-2023-38939 - CVSS 9.8 (critical), 2023-08-07: Tenda F1202 V1.2.0.9 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the mit_ssid parameter in the formWrlsafeset function.
CVE-2023-38938 - CVSS 9.8 (critical), 2023-08-07: Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the page parameter at /L7Im.
CVE-2023-38932 - CVSS 9.8 (critical), 2023-08-07: Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the page parameter in the…
CVE-2023-37715 - CVSS 9.8 (critical), 2023-07-14: Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function frmL7ProtForm.
CVE-2023-37718 - CVSS 9.8 (critical), 2023-07-14: Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromSafeClientFilter.
CVE-2023-37722 - CVSS 9.8 (critical), 2023-07-14: Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromSafeUrlFilter.
CVE-2023-37714 - CVSS 9.8 (critical), 2023-07-14: Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromRouteStatic.
CVE-2023-37717 - CVSS 9.8 (critical), 2023-07-14: Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack…
CVE-2023-37721 - CVSS 9.8 (critical), 2023-07-14: Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromSafeMacFilter.
CVE-2023-37716 - CVSS 9.8 (critical), 2023-07-14: Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack…
CVE-2023-37719 - CVSS 9.8 (critical), 2023-07-14: Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromP2pListFilter.
CVE-2023-37723 - CVSS 9.8 (critical), 2023-07-14: Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromqossetting.
CVE-2023-37712 - CVSS 9.8 (critical), 2023-07-10: Tenda AC1206 V15.03.06.23, F1202 V1.2.0.20(408), and FH1202 V1.2.0.20(408) were discovered to contain a stack overflow in the page parameter in the…