Approved changes feed: RSS · Atom

cpe:2.3:a:tenda:fh1206:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductFh1206 (cb8c04b8-8420-5612-937b-4ab7389180dd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-14994 vulnerable 2026-06-08 07:06:35.500057 Tenda FH1201/FH1206 HTTP Request webtypelibrary strcat stack-based overflow
HIGH (8.8)
A flaw has been found in Tenda FH1201 and FH1206 1.2.0.14(408)/1.2.0.8(8155). This impacts the function strcat of the file /goform/webtypelibrary of the component HTTP Request Handler. This manipulation of the argument webSiteId causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may be used.
Published: 2025-12-21T07:32:08.767Z
Updated: 2025-12-22T16:36:21.363Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7707 vulnerable 2026-06-08 06:58:23.194241 Tenda FH1206 HTTP POST Request SafeEmailFilter formSafeEmailFilter stack-based overflow
HIGH (8.8)
A vulnerability was found in Tenda FH1206 02.03.01.35 and classified as critical. Affected by this issue is the function formSafeEmailFilter of the file /goform/SafeEmailFilter of the component HTTP POST Request Handler. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-08-13T00:00:07.511Z
Updated: 2024-08-14T16:11:06.129Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7615 vulnerable 2026-06-08 06:58:22.841364 Tenda FH1206 fromSafeUrlFilter stack-based overflow
HIGH (8.8)
A vulnerability was found in Tenda FH1206 1.2.0.8. It has been declared as critical. Affected by this vulnerability is the function fromSafeClientFilter/fromSafeMacFilter/fromSafeUrlFilter. The manipulation leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-08-08T22:31:05.314Z
Updated: 2024-08-09T14:49:47.340Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7614 vulnerable 2026-06-08 06:58:22.840478 Tenda FH1206 qossetting fromqossetting stack-based overflow
HIGH (8.8)
A vulnerability was found in Tenda FH1206 1.2.0.8(8155). It has been classified as critical. Affected is the function fromqossetting of the file /goform/qossetting. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-08-08T22:31:03.812Z
Updated: 2024-08-15T17:19:10.011Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7613 vulnerable 2026-06-08 06:58:22.838251 Tenda FH1206 GstDhcpSetSer fromGstDhcpSetSer buffer overflow
HIGH (8.8)
A vulnerability was found in Tenda FH1206 1.2.0.8(8155) and classified as critical. This issue affects the function fromGstDhcpSetSer of the file /goform/GstDhcpSetSer. The manipulation of the argument dips leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-08-08T22:00:10.117Z
Updated: 2024-08-09T12:53:19.799Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4020 vulnerable 2026-06-08 06:50:16.855348 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12002 vulnerable 2026-06-08 06:23:50.886398 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.