Approved changes feed: RSS · Atom

cpe:2.3:o:tenda:fh1201_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductFh1201 Firmware (13e3ee85-6975-501b-8a87-7c29a9533a92)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-5046 vulnerable 2026-06-08 08:07:02.934023 Tenda FH1201 Parameter WrlExtraSet formWrlExtraSet stack-based overflow
HIGH (8.8)
A flaw has been found in Tenda FH1201 1.2.0.14(408). Affected is the function formWrlExtraSet of the file /goform/WrlExtraSet of the component Parameter Handler. Executing a manipulation of the argument GO can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published and may be used.
Published: 2026-03-29T14:15:12.643Z
Updated: 2026-03-30T14:10:52.945Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5045 vulnerable 2026-06-08 08:07:02.931018 Tenda FH1201 Parameter WrlclientSet stack-based overflow
HIGH (8.8)
A vulnerability was detected in Tenda FH1201 1.2.0.14(408). This impacts the function WrlclientSet of the file /goform/WrlclientSet of the component Parameter Handler. Performing a manipulation of the argument GO results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used.
Published: 2026-03-29T13:15:12.383Z
Updated: 2026-04-01T15:35:12.209Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14995 vulnerable 2026-06-08 07:06:35.507365 Tenda FH1201 SetIpBind sprintf stack-based overflow
HIGH (8.8)
A vulnerability has been found in Tenda FH1201 1.2.0.14(408). Affected is the function sprintf of the file /goform/SetIpBind. Such manipulation of the argument page leads to stack-based buffer overflow. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.
Published: 2025-12-21T08:32:07.268Z
Updated: 2026-02-24T06:00:26.438Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42955 vulnerable 2026-06-08 06:45:47.149301 Details available
Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the fromSafeClientFilter function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
Published: 2024-08-15T00:00:00.000Z
Updated: 2024-08-16T16:54:12.882Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42954 vulnerable 2026-06-08 06:45:47.148585 Details available
Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the fromwebExcptypemanFilter function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
Published: 2024-08-15T00:00:00.000Z
Updated: 2024-08-15T17:54:54.423Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42951 vulnerable 2026-06-08 06:45:47.146601 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42950 vulnerable 2026-06-08 06:45:47.145829 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42949 vulnerable 2026-06-08 06:45:47.144751 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42948 vulnerable 2026-06-08 06:45:47.139676 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42947 vulnerable 2026-06-08 06:45:47.139020 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42946 vulnerable 2026-06-08 06:45:47.138256 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42945 vulnerable 2026-06-08 06:45:47.137695 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42943 vulnerable 2026-06-08 06:45:47.136261 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42942 vulnerable 2026-06-08 06:45:47.132777 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42940 vulnerable 2026-06-08 06:45:47.127137 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.