FH
Product
FH1201
37
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 32Medium 1Low 0
Watch
Add FH1201 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-42947 | 9.8 | Aug 15 | An issue in the handler function in /goform/telnet of Tenda FH1201 v1.2.0.14 (408) allows attackers to execute arbitrary commands via a crafted HTTP request Affected: 1.2.0.14(408) |
| CVE-2024-41473 | 9.8 | Jul 25 | Tenda FH1201 v1.2.0.14 was discovered to contain a command injection vulnerability via the mac parameter at ip/goform/WriteFacMac Affected: 1.2.0.14 |
| CVE-2024-41460 | 9.8 | Jul 24 | Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter at ip/goform/RouteStatic Affected: 1.2.0.14 |
| CVE-2024-41459 | 9.8 | Jul 24 | Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the PPPOEPassword parameter at ip/goform/QuickIndex Affected: 1.2.0.14 |
| CVE-2026-5046 | 8.8 | Mar 29 | Tenda FH1201 Parameter WrlExtraSet formWrlExtraSet stack-based overflow Affected: 1.2.0.14(408) |
| CVE-2026-5045 | 8.8 | Mar 29 | Tenda FH1201 Parameter WrlclientSet stack-based overflow Affected: 1.2.0.14(408) |
| CVE-2025-14995 | 8.8 | Dec 21 | Tenda FH1201 SetIpBind sprintf stack-based overflow Affected: 1.2.0.14(408) |
| CVE-2025-14994 | 8.8 | Dec 21 | Tenda FH1201/FH1206 HTTP Request webtypelibrary strcat stack-based overflow Affected: 1.2.0.14(408) |
| CVE-2025-7551 | 8.8 | Jul 13 | Tenda FH1201 PPTPDClient fromPptpUserAdd stack-based overflow Affected: 1.2.0.14(408) |
| CVE-2025-7550 | 8.8 | Jul 13 | Tenda FH1201 GstDhcpSetSer fromGstDhcpSetSer stack-based overflow Affected: 1.2.0.14(408) |
| CVE-2025-7549 | 8.8 | Jul 13 | Tenda FH1201 L7Prot frmL7ProtForm stack-based overflow Affected: 1.2.0.14(408) |
| CVE-2025-7548 | 8.8 | Jul 13 | Tenda FH1201 SafeEmailFilter formSafeEmailFilter stack-based overflow Affected: 1.2.0.14(408) |
| CVE-2025-7468 | 8.8 | Jul 12 | Tenda FH1201 HTTP POST Request fromSafeUrlFilter buffer overflow Affected: 1.2.0.14 |
| CVE-2025-7465 | 8.8 | Jul 12 | Tenda FH1201 HTTP POST Request fromRouteStatic buffer overflow Affected: 1.2.0.14 |
| CVE-2025-7463 | 8.8 | Jul 12 | Tenda FH1201 HTTP POST Request AdvSetWrlsafeset formWrlsafeset buffer overflow Affected: 1.2.0.14 |
| CVE-2025-6110 | 8.8 | Jun 16 | Tenda FH1201 SafeMacFilter stack-based overflow Affected: 1.2.0.14(408) |
| CVE-2024-44859 | 8.0 | Sep 4 | Tenda FH1201 v1.2.0.14 has a stack buffer overflow vulnerability in `formWrlExtraGet` Affected: 1.2.0.14 |
| CVE-2024-42950 | 7.5 | Aug 15 | Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the Go parameter in the fromSafeClientFilter function Affected: 1.2.0.14(408) |
| CVE-2024-42951 | 7.5 | Aug 15 | Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the mit_pptpusrpw parameter in the fromWizardHandle function Affected: 1.2.0.14(408) |
| CVE-2024-42952 | 7.5 | Aug 15 | Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the fromqossetting function Affected: 1.2.0.14(408) |
| CVE-2024-42953 | 7.5 | Aug 15 | Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the PPW parameter in the fromWizardHandle function Affected: 1.2.0.14 |
| CVE-2024-42954 | 7.5 | Aug 15 | Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the fromwebExcptypemanFilter function Affected: 1.2.0.14(408) |
| CVE-2024-42955 | 7.5 | Aug 15 | Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the fromSafeClientFilter function Affected: 1.2.0.14(408) |
| CVE-2024-42942 | 7.5 | Aug 15 | Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the frmL7ImForm function Affected: 1.2.0.14 |
| CVE-2024-42943 | 7.5 | Aug 15 | Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the PPPOEPassword parameter in the fromAdvSetWan function Affected: 1.2.0.14(408) |
| CVE-2024-42941 | 7.5 | Aug 15 | Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the wanmode parameter in the fromAdvSetWan function Affected: 1.2.0.14(408) |
| CVE-2024-42944 | 7.5 | Aug 15 | Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the fromNatlimit function Affected: 1.2.0.14(408) |
| CVE-2024-42945 | 7.5 | Aug 15 | Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the fromAddressNat function Affected: 1.2.0.14(408) |
| CVE-2024-42946 | 7.5 | Aug 15 | Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the fromVirtualSer function Affected: 1.2.0.14(408) |
| CVE-2024-42940 | 7.5 | Aug 15 | Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the fromP2pListFilter function Affected: 1.2.0.14(408) |
| CVE-2024-42948 | 7.5 | Aug 15 | Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the delno parameter in the fromPptpUserSetting function Affected: 1.2.0.14(408) |
| CVE-2024-42949 | 7.5 | Aug 15 | Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the qos parameter in the fromqossetting function Affected: 1.2.0.14 |
| CVE-2024-41462 | 7.5 | Jul 24 | Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/DhcpListClient Affected: 1.2.0.14 |
| CVE-2024-41465 | 7.5 | Jul 24 | Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter at ip/goform/setcfm Affected: 1.2.0.14 |
| CVE-2024-41463 | 7.5 | Jul 24 | Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter at ip/goform/addressNat Affected: 1.2.0.14 |
| CVE-2024-41466 | 7.5 | Jul 24 | Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/NatStaticSetting Affected: 1.2.0.14 |
| CVE-2024-12002 | 6.5 | Nov 30 | Tenda FH451/FH1201/FH1202/FH1206 GetIPTV websReadEvent null pointer dereference Affected: 1.2.0.8(8155); 1.2.0.14(408)_en |
Showing 37
