Tenda
Tenda Fh1206 Firmware: vulnerabilidades y CVE
Tenda Fh1206 Firmware tiene 39 vulnerabilidades publicadas, 1 de ellas en los últimos 12 meses. 5 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE39
Últimos 12 meses1
Críticas5
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2025-14994 | Alta (7.4) | 0.75% | — | 21 dic 2025 | A flaw has been found in Tenda FH1201 and FH1206 1.2.0.14(408)/1.2.0.8(8155). This impacts the function strcat of the file /goform/webtypelibrary of the component HTTP Request Handler. This manipulation of the argument… |
| CVE-2024-12002 | Media (5.3) | 0.80% | — | 30 nov 2024 | A vulnerability classified as problematic was found in Tenda FH451, FH1201, FH1202 and FH1206 up to 20241129. Affected by this vulnerability is the function websReadEvent of the file /goform/GetIPTV. The manipulation of… |
| CVE-2024-44390 | Alta (8.8) | 0.30% | — | 23 ago 2024 | Tenda FH1206 V1.2.0.8(8155)_EN contains a Buffer Overflow vulnerability via the function formWrlsafeset. |
| CVE-2024-44387 | Media (6.5) | 0.27% | — | 23 ago 2024 | Tenda FH1206 V1.2.0.8(8155)_EN contains a Buffer Overflow vulnerability via the functino formWrlExtraGet. |
| CVE-2024-44386 | Alta (7.3) | 0.32% | — | 23 ago 2024 | Tenda FH1206 V1.2.0.8(8155)_EN contains a Buffer Overflow vulnerability via the function fromSetIpBind. |
| CVE-2024-42987 | Alta (7.5) | 1.3% | — | 15 ago 2024 | Tenda FH1206 v02.03.01.35 was discovered to contain a stack-based buffer overflow vulnerability in the fromPptpUserAdd function. The vulnerability can be triggered via the modino, username, newpwd, or pptpdnetseg… |
| CVE-2024-42986 | Alta (7.5) | 0.55% | — | 15 ago 2024 | Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the PPPOEPassword parameter in the fromAdvSetWan function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted… |
| CVE-2024-42985 | Alta (7.5) | 0.55% | — | 15 ago 2024 | Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromNatlimit function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request. |
| CVE-2024-42984 | Alta (7.5) | 0.55% | — | 15 ago 2024 | Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromP2pListFilter function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST… |
| CVE-2024-42983 | Alta (7.5) | 0.55% | — | 15 ago 2024 | Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the pptpPPW parameter in the fromAdvSetWan function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST… |
| CVE-2024-42982 | Alta (7.5) | 0.55% | — | 15 ago 2024 | Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromVirtualSer function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST… |
| CVE-2024-42981 | Alta (7.5) | 0.55% | — | 15 ago 2024 | Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the delno parameter in the fromPptpUserSetting function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST… |
| CVE-2024-42980 | Alta (7.5) | 0.55% | — | 15 ago 2024 | Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the frmL7ImForm function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request. |
| CVE-2024-42979 | Alta (7.5) | 0.55% | — | 15 ago 2024 | Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the frmL7ProtForm function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST… |
| CVE-2024-42978 | Crítica (9.8) | 1.2% | — | 15 ago 2024 | An issue in the handler function in /goform/telnet of Tenda FH1206 v02.03.01.35 allows attackers to execute arbitrary commands via a crafted HTTP request. |
| CVE-2024-42977 | Alta (7.5) | 0.55% | — | 15 ago 2024 | Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the qos parameter in the fromqossetting function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST… |
| CVE-2024-42976 | Alta (7.5) | 0.55% | — | 15 ago 2024 | Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromSafeClientFilter function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST… |
| CVE-2024-42974 | Alta (7.5) | 0.55% | — | 15 ago 2024 | Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromwebExcptypemanFilter function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted… |
| CVE-2024-42973 | Alta (7.5) | 0.55% | — | 15 ago 2024 | Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromSetlpBind function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST… |
| CVE-2024-42969 | Alta (7.5) | 0.55% | — | 15 ago 2024 | Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromSafeUrlFilter function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST… |
| CVE-2024-42968 | Alta (7.5) | 0.55% | — | 15 ago 2024 | Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the Go parameter in the fromSafeUrlFilter function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST… |
| CVE-2024-7707 | Alta (8.7) | 1.3% | — | 13 ago 2024 | A vulnerability was found in Tenda FH1206 02.03.01.35 and classified as critical. Affected by this issue is the function formSafeEmailFilter of the file /goform/SafeEmailFilter of the component HTTP POST Request… |
| CVE-2024-7615 | Alta (8.7) | 1.5% | — | 12 ago 2024 | A vulnerability was found in Tenda FH1206 1.2.0.8. It has been declared as critical. Affected by this vulnerability is the function fromSafeClientFilter/fromSafeMacFilter/fromSafeUrlFilter. The manipulation leads to… |
| CVE-2024-7614 | Alta (8.7) | 1.5% | — | 12 ago 2024 | A vulnerability was found in Tenda FH1206 1.2.0.8(8155). It has been classified as critical. Affected is the function fromqossetting of the file /goform/qossetting. The manipulation of the argument page leads to… |
| CVE-2024-7613 | Alta (8.7) | 1.5% | — | 12 ago 2024 | A vulnerability was found in Tenda FH1206 1.2.0.8(8155) and classified as critical. This issue affects the function fromGstDhcpSetSer of the file /goform/GstDhcpSetSer. The manipulation of the argument dips leads to… |
| CVE-2024-35340 | Alta (8.6) | 1.2% | — | 24 may 2024 | Tenda FH1206 V1.2.0.8(8155) was discovered to contain a command injection vulnerability via the cmdinput parameter at ip/goform/formexeCommand. |
| CVE-2024-35339 | Crítica (9.8) | 1.8% | — | 24 may 2024 | Tenda FH1206 V1.2.0.8(8155) was discovered to contain a command injection vulnerability via the mac parameter at ip/goform/WriteFacMac. |
| CVE-2024-34946 | Media (6.5) | 0.66% | — | 14 may 2024 | Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/DhcpListClient. |
| CVE-2024-34945 | Crítica (9.8) | 0.90% | — | 14 may 2024 | Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the PPW parameter at ip/goform/WizardHandle. |
| CVE-2024-34944 | Alta (8.8) | 0.42% | — | 14 may 2024 | Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the list1 parameter at ip/goform/DhcpListClient. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.