Approved changes feed: RSS · Atom

cpe:2.3:o:tenda:fh1201_firmware:1.2.0.14:*:*:*:*:*:*:*

part: o version: 1.2.0.14 update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductFh1201 Firmware (13e3ee85-6975-501b-8a87-7c29a9533a92)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-7468 vulnerable 2026-06-08 07:45:17.465585 Tenda FH1201 HTTP POST Request fromSafeUrlFilter buffer overflow
HIGH (8.8)
A vulnerability has been found in Tenda FH1201 1.2.0.14 and classified as critical. This vulnerability affects the function fromSafeUrlFilter of the file /goform/fromSafeUrlFilter of the component HTTP POST Request Handler. The manipulation of the argument page leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-12T09:02:06.642Z
Updated: 2025-07-14T20:12:00.447Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7465 vulnerable 2026-06-08 07:45:17.461222 Tenda FH1201 HTTP POST Request fromRouteStatic buffer overflow
HIGH (8.8)
A vulnerability classified as critical was found in Tenda FH1201 1.2.0.14. Affected by this vulnerability is the function fromRouteStatic of the file /goform/fromRouteStatic of the component HTTP POST Request Handler. The manipulation of the argument page leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-12T07:02:07.562Z
Updated: 2025-07-14T20:12:32.863Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7463 vulnerable 2026-06-08 07:45:17.455647 Tenda FH1201 HTTP POST Request AdvSetWrlsafeset formWrlsafeset buffer overflow
HIGH (8.8)
A vulnerability was found in Tenda FH1201 1.2.0.14. It has been declared as critical. This vulnerability affects the function formWrlsafeset of the file /goform/AdvSetWrlsafeset of the component HTTP POST Request Handler. The manipulation of the argument mit_ssid leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-12T06:02:06.537Z
Updated: 2025-07-14T20:12:45.377Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-44859 vulnerable 2026-06-08 06:45:54.226657 Details available
Tenda FH1201 v1.2.0.14 has a stack buffer overflow vulnerability in `formWrlExtraGet`.
Published: 2024-09-04T00:00:00.000Z
Updated: 2024-09-04T16:04:00.547Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42953 vulnerable 2026-06-08 06:45:47.147757 Details available
Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the PPW parameter in the fromWizardHandle function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
Published: 2024-08-15T00:00:00.000Z
Updated: 2024-08-15T18:02:21.548Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42952 vulnerable 2026-06-08 06:45:47.147157 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42944 vulnerable 2026-06-08 06:45:47.136951 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42941 vulnerable 2026-06-08 06:45:47.132054 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41473 vulnerable 2026-06-08 06:43:54.534661 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41466 vulnerable 2026-06-08 06:43:54.533558 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41465 vulnerable 2026-06-08 06:43:54.532754 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41463 vulnerable 2026-06-08 06:43:54.531567 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41462 vulnerable 2026-06-08 06:43:54.530865 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41460 vulnerable 2026-06-08 06:43:54.527933 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41459 vulnerable 2026-06-08 06:43:54.525273 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.