Fh1206 Firmware (Tenda) - vulnerabilities (CVEs)

39 CVEs, 0 in the last 30 days, 8 known versions, newest CVE from 2025-12-21. Vendor: Tenda.

CVEs of Fh1206 Firmware

CVE-2025-14994 - CVSS 8.8 (high), 2025-12-21: A flaw has been found in Tenda FH1201 and FH1206 1.2.0.14(408)/1.2.0.8(8155). This impacts the function strcat of the file /goform/webtypelibrary of the…
CVE-2024-12002 - CVSS 6.5 (medium), 2024-11-30: A vulnerability classified as problematic was found in Tenda FH451, FH1201, FH1202 and FH1206 up to 20241129. Affected by this vulnerability is the function…
CVE-2024-44387 - CVSS 6.5 (medium), 2024-08-23: Tenda FH1206 V1.2.0.8(8155)_EN contains a Buffer Overflow vulnerability via the functino formWrlExtraGet.
CVE-2024-44390 - CVSS 8.8 (high), 2024-08-23: Tenda FH1206 V1.2.0.8(8155)_EN contains a Buffer Overflow vulnerability via the function formWrlsafeset.
CVE-2024-44386 - CVSS 7.3 (high), 2024-08-23: Tenda FH1206 V1.2.0.8(8155)_EN contains a Buffer Overflow vulnerability via the function fromSetIpBind.
CVE-2024-42980 - CVSS 7.5 (high), 2024-08-15: Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the frmL7ImForm function. This vulnerability allows attackers…
CVE-2024-42983 - CVSS 7.5 (high), 2024-08-15: Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the pptpPPW parameter in the fromAdvSetWan function. This vulnerability allows…
CVE-2024-42986 - CVSS 7.5 (high), 2024-08-15: Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the PPPOEPassword parameter in the fromAdvSetWan function. This vulnerability allows…
CVE-2024-42979 - CVSS 7.5 (high), 2024-08-15: Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the frmL7ProtForm function. This vulnerability allows attackers…
CVE-2024-42982 - CVSS 7.5 (high), 2024-08-15: Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromVirtualSer function. This vulnerability allows…
CVE-2024-42985 - CVSS 7.5 (high), 2024-08-15: Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromNatlimit function. This vulnerability allows attackers…
CVE-2024-42981 - CVSS 7.5 (high), 2024-08-15: Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the delno parameter in the fromPptpUserSetting function. This vulnerability allows…
CVE-2024-42984 - CVSS 7.5 (high), 2024-08-15: Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromP2pListFilter function. This vulnerability allows…
CVE-2024-42987 - CVSS 7.5 (high), 2024-08-15: Tenda FH1206 v02.03.01.35 was discovered to contain a stack-based buffer overflow vulnerability in the fromPptpUserAdd function. The vulnerability can be…
CVE-2024-42969 - CVSS 7.5 (high), 2024-08-15: Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromSafeUrlFilter function. This vulnerability allows…
CVE-2024-42976 - CVSS 7.5 (high), 2024-08-15: Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromSafeClientFilter function. This vulnerability allows…
CVE-2024-42968 - CVSS 7.5 (high), 2024-08-15: Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the Go parameter in the fromSafeUrlFilter function. This vulnerability allows…
CVE-2024-42974 - CVSS 7.5 (high), 2024-08-15: Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromwebExcptypemanFilter function. This vulnerability…
CVE-2024-42978 - CVSS 9.8 (critical), 2024-08-15: An issue in the handler function in /goform/telnet of Tenda FH1206 v02.03.01.35 allows attackers to execute arbitrary commands via a crafted HTTP request.
CVE-2024-42973 - CVSS 7.5 (high), 2024-08-15: Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromSetlpBind function. This vulnerability allows attackers…
CVE-2024-42977 - CVSS 7.5 (high), 2024-08-15: Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the qos parameter in the fromqossetting function. This vulnerability allows attackers…
CVE-2024-7707 - CVSS 9.8 (critical), 2024-08-13: A vulnerability was found in Tenda FH1206 02.03.01.35 and classified as critical. Affected by this issue is the function formSafeEmailFilter of the file…
CVE-2024-7614 - CVSS 9.8 (critical), 2024-08-12: A vulnerability was found in Tenda FH1206 1.2.0.8(8155). It has been classified as critical. Affected is the function fromqossetting of the file…
CVE-2024-7613 - CVSS 9.8 (critical), 2024-08-12: A vulnerability was found in Tenda FH1206 1.2.0.8(8155) and classified as critical. This issue affects the function fromGstDhcpSetSer of the file…
CVE-2024-7615 - CVSS 9.8 (critical), 2024-08-12: A vulnerability was found in Tenda FH1206 1.2.0.8. It has been declared as critical. Affected by this vulnerability is the function…
CVE-2024-35339 - CVSS 9.8 (critical), 2024-05-24: Tenda FH1206 V1.2.0.8(8155) was discovered to contain a command injection vulnerability via the mac parameter at ip/goform/WriteFacMac.
CVE-2024-35340 - CVSS 8.6 (high), 2024-05-24: Tenda FH1206 V1.2.0.8(8155) was discovered to contain a command injection vulnerability via the cmdinput parameter at ip/goform/formexeCommand.
CVE-2024-34944 - CVSS 8.8 (high), 2024-05-14: Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the list1 parameter at ip/goform/DhcpListClient.
CVE-2024-34942 - CVSS 8.8 (high), 2024-05-14: Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter at ip/goform/exeCommand.
CVE-2024-34946 - CVSS 6.5 (medium), 2024-05-14: Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/DhcpListClient.
CVE-2024-34943 - CVSS 9.8 (critical), 2024-05-14: Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/NatStaticSetting.
CVE-2024-34945 - CVSS 9.8 (critical), 2024-05-14: Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the PPW parameter at ip/goform/WizardHandle.
CVE-2024-33213 - CVSS 6.5 (medium), 2024-04-23: Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the mitInterface parameter in ip/goform/RouteStatic.
CVE-2024-33212 - CVSS 8.8 (high), 2024-04-23: Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter in ip/goform/setcfm.
CVE-2024-33217 - CVSS 7.5 (high), 2024-04-23: Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the page parameter in ip/goform/addressNat.
CVE-2024-33214 - CVSS 7.5 (high), 2024-04-23: Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter in ip/goform/RouteStatic.
CVE-2024-33211 - CVSS 7.3 (high), 2024-04-23: Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the PPPOEPassword parameter in ip/goform/QuickIndex.
CVE-2024-33215 - CVSS 9.8 (critical), 2024-04-23: Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the mitInterface parameter in ip/goform/addressNat.
CVE-2024-4020 - CVSS 8.8 (high), 2024-04-20: A vulnerability was found in Tenda FH1206 1.2.0.8(8155) and classified as critical. This issue affects the function fromAddressNat of the file…