Approved changes feed: RSS · Atom

cpe:2.3:o:tenda:fh1201_firmware:1.2.0.14\(408\):*:*:*:*:*:*:*

part: o version: 1.2.0.14(408) update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductFh1201 Firmware (13e3ee85-6975-501b-8a87-7c29a9533a92)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-5046 vulnerable 2026-06-08 08:07:02.934166 Tenda FH1201 Parameter WrlExtraSet formWrlExtraSet stack-based overflow
HIGH (8.8)
A flaw has been found in Tenda FH1201 1.2.0.14(408). Affected is the function formWrlExtraSet of the file /goform/WrlExtraSet of the component Parameter Handler. Executing a manipulation of the argument GO can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published and may be used.
Published: 2026-03-29T14:15:12.643Z
Updated: 2026-03-30T14:10:52.945Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5045 vulnerable 2026-06-08 08:07:02.932556 Tenda FH1201 Parameter WrlclientSet stack-based overflow
HIGH (8.8)
A vulnerability was detected in Tenda FH1201 1.2.0.14(408). This impacts the function WrlclientSet of the file /goform/WrlclientSet of the component Parameter Handler. Performing a manipulation of the argument GO results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used.
Published: 2026-03-29T13:15:12.383Z
Updated: 2026-04-01T15:35:12.209Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7551 vulnerable 2026-06-08 07:45:17.650695 Tenda FH1201 PPTPDClient fromPptpUserAdd stack-based overflow
HIGH (8.8)
A vulnerability was found in Tenda FH1201 1.2.0.14(408). It has been declared as critical. Affected by this vulnerability is the function fromPptpUserAdd of the file /goform/PPTPDClient. The manipulation of the argument modino/username leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-13T23:14:07.247Z
Updated: 2025-07-14T13:46:07.393Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7550 vulnerable 2026-06-08 07:45:17.650006 Tenda FH1201 GstDhcpSetSer fromGstDhcpSetSer stack-based overflow
HIGH (8.8)
A vulnerability was found in Tenda FH1201 1.2.0.14(408). It has been classified as critical. Affected is the function fromGstDhcpSetSer of the file /goform/GstDhcpSetSer. The manipulation of the argument dips leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-13T23:02:07.618Z
Updated: 2025-07-14T13:52:25.344Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7549 vulnerable 2026-06-08 07:45:17.649371 Tenda FH1201 L7Prot frmL7ProtForm stack-based overflow
HIGH (8.8)
A vulnerability was found in Tenda FH1201 1.2.0.14(408) and classified as critical. This issue affects the function frmL7ProtForm of the file /goform/L7Prot. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-13T22:44:06.676Z
Updated: 2025-07-14T13:55:07.574Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7548 vulnerable 2026-06-08 07:45:17.648711 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6110 vulnerable 2026-06-08 07:43:14.298330 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14995 vulnerable 2026-06-08 07:06:35.507558 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14994 vulnerable 2026-06-08 07:06:35.501314 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42955 vulnerable 2026-06-08 06:45:47.149442 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42952 vulnerable 2026-06-08 06:45:47.147214 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42951 vulnerable 2026-06-08 06:45:47.146820 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42950 vulnerable 2026-06-08 06:45:47.146068 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42948 vulnerable 2026-06-08 06:45:47.139732 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42947 vulnerable 2026-06-08 06:45:47.139251 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42946 vulnerable 2026-06-08 06:45:47.138415 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42944 vulnerable 2026-06-08 06:45:47.137141 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42943 vulnerable 2026-06-08 06:45:47.136573 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42941 vulnerable 2026-06-08 06:45:47.132248 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42940 vulnerable 2026-06-08 06:45:47.128814 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.