Approved changes feed: RSS · Atom

cpe:2.3:o:tenda:fh1206_firmware:1.2.0.8\(8155\):*:*:*:*:*:*:*

part: o version: 1.2.0.8(8155) update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductFh1206 Firmware (105dc51e-1986-5697-843d-1242e9204262)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-14994 vulnerable 2026-06-08 07:06:35.502955 Tenda FH1201/FH1206 HTTP Request webtypelibrary strcat stack-based overflow
HIGH (8.8)
A flaw has been found in Tenda FH1201 and FH1206 1.2.0.14(408)/1.2.0.8(8155). This impacts the function strcat of the file /goform/webtypelibrary of the component HTTP Request Handler. This manipulation of the argument webSiteId causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may be used.
Published: 2025-12-21T07:32:08.767Z
Updated: 2025-12-22T16:36:21.363Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7615 vulnerable 2026-06-08 06:58:22.841325 Tenda FH1206 fromSafeUrlFilter stack-based overflow
HIGH (8.8)
A vulnerability was found in Tenda FH1206 1.2.0.8. It has been declared as critical. Affected by this vulnerability is the function fromSafeClientFilter/fromSafeMacFilter/fromSafeUrlFilter. The manipulation leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-08-08T22:31:05.314Z
Updated: 2024-08-09T14:49:47.340Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7614 vulnerable 2026-06-08 06:58:22.840505 Tenda FH1206 qossetting fromqossetting stack-based overflow
HIGH (8.8)
A vulnerability was found in Tenda FH1206 1.2.0.8(8155). It has been classified as critical. Affected is the function fromqossetting of the file /goform/qossetting. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-08-08T22:31:03.812Z
Updated: 2024-08-15T17:19:10.011Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7613 vulnerable 2026-06-08 06:58:22.837601 Tenda FH1206 GstDhcpSetSer fromGstDhcpSetSer buffer overflow
HIGH (8.8)
A vulnerability was found in Tenda FH1206 1.2.0.8(8155) and classified as critical. This issue affects the function fromGstDhcpSetSer of the file /goform/GstDhcpSetSer. The manipulation of the argument dips leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-08-08T22:00:10.117Z
Updated: 2024-08-09T12:53:19.799Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4020 vulnerable 2026-06-08 06:50:16.856065 Tenda FH1206 addressNat fromAddressNat buffer overflow
HIGH (8.8)
A vulnerability was found in Tenda FH1206 1.2.0.8(8155) and classified as critical. This issue affects the function fromAddressNat of the file /goform/addressNat. The manipulation of the argument entrys leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-261671. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-04-20T23:00:06.043Z
Updated: 2024-08-01T20:26:57.278Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-44390 vulnerable 2026-06-08 06:45:54.021697 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-44387 vulnerable 2026-06-08 06:45:54.020945 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35340 vulnerable 2026-06-08 06:37:35.940734 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35339 vulnerable 2026-06-08 06:37:35.940337 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33217 vulnerable 2026-06-08 06:37:30.920281 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33215 vulnerable 2026-06-08 06:37:30.919776 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33214 vulnerable 2026-06-08 06:37:30.919273 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33213 vulnerable 2026-06-08 06:37:30.916019 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33212 vulnerable 2026-06-08 06:37:30.915358 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33211 vulnerable 2026-06-08 06:37:30.912034 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12002 vulnerable 2026-06-08 06:23:50.895559 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.