GCVE - cpe:2.3:a:tenda:fh1203:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:tenda:fh1203:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Tenda (`cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42`)
Product	Fh1203 (`2ccdd773-57ac-596a-a435-9ddf6545850f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-6113`	vulnerable	2026-06-08 07:43:14.306690	Tenda FH1203 AdvSetLanip fromadvsetlanip buffer overflow HIGH (8.8) A vulnerability, which was classified as critical, was found in Tenda FH1203 2.0.1.6. Affected is the function fromadvsetlanip of the file /goform/AdvSetLanip. The manipulation of the argument lanMask leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2025-06-16T08:00:09.975Z Updated: 2025-06-16T17:25:59.102Z Open on db.gcve.eu Reference links https://vuldb.com/?id.312582 https://vuldb.com/?ctiid.312582 https://vuldb.com/?submit.592478 https://lavender-bicycle-a5a.notion.site/Tenda-FH1203-fromadvsetlanip-20b53a41781f8070bc65ffadd1ed6bf1?source=copy_link https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-2994`	vulnerable	2026-06-08 06:35:27.918990	Tenda FH1203 GetParentControlInfo stack-based overflow HIGH (8.8) A vulnerability was found in Tenda FH1203 2.0.1.6. It has been declared as critical. Affected by this vulnerability is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-258163. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Published: 2024-03-27T19:31:05.677Z Updated: 2024-08-12T15:43:12.422Z Open on db.gcve.eu Reference links https://vuldb.com/?id.258163 https://vuldb.com/?ctiid.258163 https://vuldb.com/?submit.301373 https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1203/GetParentControlInfo.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-2993`	vulnerable	2026-06-08 06:35:27.918165	Tenda FH1203 QuickIndex formQuickIndex stack-based overflow HIGH (8.8) A vulnerability was found in Tenda FH1203 2.0.1.6. It has been classified as critical. Affected is the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-258162 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Published: 2024-03-27T19:31:04.310Z Updated: 2024-08-21T13:47:18.504Z Open on db.gcve.eu Reference links https://vuldb.com/?id.258162 https://vuldb.com/?ctiid.258162 https://vuldb.com/?submit.301372 https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1203/formQuickIndex.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-2992`	vulnerable	2026-06-08 06:35:27.917686	Tenda FH1203 setcfm formSetCfm stack-based overflow HIGH (8.8) A vulnerability was found in Tenda FH1203 2.0.1.6 and classified as critical. This issue affects the function formSetCfm of the file /goform/setcfm. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-258161 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Published: 2024-03-27T19:00:05.554Z Updated: 2024-08-01T19:32:42.476Z Open on db.gcve.eu Reference links https://vuldb.com/?id.258161 https://vuldb.com/?ctiid.258161 https://vuldb.com/?submit.301371 https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1203/formSetCfm.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-2991`	vulnerable	2026-06-08 06:35:27.916998	Tenda FH1203 WriteFacMac formWriteFacMac command injection MEDIUM (6.3) A vulnerability has been found in Tenda FH1203 2.0.1.6 and classified as critical. This vulnerability affects the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-258160. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Published: 2024-03-27T18:31:06.019Z Updated: 2024-08-12T14:35:32.370Z Open on db.gcve.eu Reference links https://vuldb.com/?id.258160 https://vuldb.com/?ctiid.258160 https://vuldb.com/?submit.301366 https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1203/formWriteFacMac.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-2990`	vulnerable	2026-06-08 06:35:27.916134	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-2989`	vulnerable	2026-06-08 06:35:27.915521	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-2988`	vulnerable	2026-06-08 06:35:27.913361	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.