Filtered by vendor Tenda Subscriptions
Filtered by product Fh1202 Subscriptions
Total 37 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-30592 1 Tenda 2 Fh1202, Fh1202 Firmware 2025-03-13 8.0 High
Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the page parameter of the fromAddressNat function.
CVE-2024-30591 1 Tenda 2 Fh1202, Fh1202 Firmware 2025-03-13 8.8 High
Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the time parameter of the saveParentControlInfo function.
CVE-2024-30590 1 Tenda 2 Fh1202, Fh1202 Firmware 2025-03-13 6.5 Medium
Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the schedEndTime parameter of the setSchedWifi function.
CVE-2024-30589 1 Tenda 2 Fh1202, Fh1202 Firmware 2025-03-13 9.8 Critical
Tenda FH1202 v1.2.0.14(408) firmware has a stack overflow vulnerability in the entrys parameter of the fromAddressNat function.
CVE-2024-30588 1 Tenda 2 Fh1202, Fh1202 Firmware 2025-03-13 4.3 Medium
Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the schedStartTime parameter of the setSchedWifi function.
CVE-2024-30587 1 Tenda 2 Fh1202, Fh1202 Firmware 2025-03-13 9.8 Critical
Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the urls parameter of the saveParentControlInfo function.
CVE-2024-30586 1 Tenda 2 Fh1202, Fh1202 Firmware 2025-03-13 6.5 Medium
Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the security_5g parameter of the formWifiBasicSet function.
CVE-2024-30585 1 Tenda 2 Fh1202, Fh1202 Firmware 2025-03-13 6.5 Medium
Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the deviceId parameter of the saveParentControlInfo function.
CVE-2024-30584 1 Tenda 2 Fh1202, Fh1202 Firmware 2025-03-13 9.8 Critical
Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the security parameter of the formWifiBasicSet function.
CVE-2024-30583 1 Tenda 2 Fh1202, Fh1202 Firmware 2025-03-13 8.0 High
Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the mitInterface parameter of the fromAddressNat function.
CVE-2024-30596 1 Tenda 2 Fh1202, Fh1202 Firmware 2025-03-13 9.8 Critical
Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the deviceId parameter of the formSetDeviceName function.
CVE-2024-30594 1 Tenda 2 Fh1202, Fh1202 Firmware 2025-03-13 6.5 Medium
Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the deviceMac parameter of the addWifiMacFilter function.
CVE-2024-30593 1 Tenda 2 Fh1202, Fh1202 Firmware 2025-03-13 9.8 Critical
Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability located in the deviceName parameter of the formSetDeviceName function.
CVE-2024-30595 1 Tenda 2 Fh1202, Fh1202 Firmware 2025-03-13 9.8 Critical
Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the deviceId parameter of the addWifiMacFilter function.
CVE-2024-2980 1 Tenda 2 Fh1202, Fh1202 Firmware 2025-01-14 8.8 High
A vulnerability, which was classified as critical, has been found in Tenda FH1202 1.2.0.14(408). This issue affects the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-258149 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2024-2981 1 Tenda 2 Fh1202, Fh1202 Firmware 2025-01-14 8.8 High
A vulnerability, which was classified as critical, was found in Tenda FH1202 1.2.0.14(408). Affected is the function form_fast_setting_wifi_set of the file /goform/fast_setting_wifi_set. The manipulation of the argument ssid leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-258150 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2024-2982 1 Tenda 2 Fh1202, Fh1202 Firmware 2025-01-14 5.5 Medium
A vulnerability has been found in Tenda FH1202 1.2.0.14(408) and classified as critical. Affected by this vulnerability is the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to command injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-258151. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2024-2983 1 Tenda 2 Fh1202, Fh1202 Firmware 2025-01-14 8.8 High
A vulnerability was found in Tenda FH1202 1.2.0.14(408) and classified as critical. Affected by this issue is the function formSetClientState of the file /goform/SetClientState. The manipulation of the argument deviceId/limitSpeed/limitSpeedUp leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-258152. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2024-2984 1 Tenda 2 Fh1202, Fh1202 Firmware 2025-01-14 8.8 High
A vulnerability was found in Tenda FH1202 1.2.0.14(408). It has been classified as critical. This affects the function formSetCfm of the file /goform/setcfm. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-258153 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2024-2985 1 Tenda 2 Fh1202, Fh1202 Firmware 2025-01-14 8.8 High
A vulnerability was found in Tenda FH1202 1.2.0.14(408). It has been declared as critical. This vulnerability affects the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-258154 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.