Approved changes feed: RSS · Atom

cpe:2.3:o:tenda:fh1206_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductFh1206 Firmware (105dc51e-1986-5697-843d-1242e9204262)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-44387 vulnerable 2026-06-08 06:45:54.019805 Details available
Tenda FH1206 V1.2.0.8(8155)_EN contains a Buffer Overflow vulnerability via the functino formWrlExtraGet.
Published: 2024-08-23T00:00:00.000Z
Updated: 2024-08-23T17:00:19.365Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42987 vulnerable 2026-06-08 06:45:47.197057 Details available
Tenda FH1206 v02.03.01.35 was discovered to contain a stack-based buffer overflow vulnerability in the fromPptpUserAdd function. The vulnerability can be triggered via the modino, username, newpwd, or pptpdnetseg parameters, all of which are passed via HTTP POST and used in unsafe sprintf calls without proper length validation. A remote attacker can exploit this flaw through a crafted POST request, which may cause a Denial of Service (DoS). In certain scenarios, this issue could potentially be leveraged to achieve remote code execution.
Published: 2024-08-15T00:00:00.000Z
Updated: 2025-09-02T16:50:24.750Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42984 vulnerable 2026-06-08 06:45:47.184384 Details available
Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromP2pListFilter function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
Published: 2024-08-15T00:00:00.000Z
Updated: 2024-08-15T17:51:14.140Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42979 vulnerable 2026-06-08 06:45:47.181514 Details available
Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the frmL7ProtForm function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
Published: 2024-08-15T00:00:00.000Z
Updated: 2024-08-15T17:19:26.256Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42978 vulnerable 2026-06-08 06:45:47.180945 Details available
An issue in the handler function in /goform/telnet of Tenda FH1206 v02.03.01.35 allows attackers to execute arbitrary commands via a crafted HTTP request.
Published: 2024-08-15T00:00:00.000Z
Updated: 2025-03-25T16:59:03.176Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42974 vulnerable 2026-06-08 06:45:47.179027 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42968 vulnerable 2026-06-08 06:45:47.169342 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34944 vulnerable 2026-06-08 06:37:35.141766 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.