Tenda

Fh1206 Firmware

38 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2024-7707

Exploit
  • EPSS 0.6%
  • Veröffentlicht 13.08.2024 01:24:09
  • Zuletzt bearbeitet 22.08.2024 13:23:20

A vulnerability was found in Tenda FH1206 02.03.01.35 and classified as critical. Affected by this issue is the function formSafeEmailFilter of the file /goform/SafeEmailFilter of the component HTTP POST Request Handler. The manipulation of the argum...

9.8

CVE-2024-7615

Exploit
  • EPSS 0.44%
  • Veröffentlicht 12.08.2024 13:38:44
  • Zuletzt bearbeitet 21.08.2024 18:48:19

A vulnerability was found in Tenda FH1206 1.2.0.8. It has been declared as critical. Affected by this vulnerability is the function fromSafeClientFilter/fromSafeMacFilter/fromSafeUrlFilter. The manipulation leads to stack-based buffer overflow. The a...

9.8

CVE-2024-7614

Exploit
  • EPSS 0.44%
  • Veröffentlicht 12.08.2024 13:38:44
  • Zuletzt bearbeitet 21.08.2024 18:48:47

A vulnerability was found in Tenda FH1206 1.2.0.8(8155). It has been classified as critical. Affected is the function fromqossetting of the file /goform/qossetting. The manipulation of the argument page leads to stack-based buffer overflow. It is pos...

9.8

CVE-2024-7613

Exploit
  • EPSS 0.44%
  • Veröffentlicht 12.08.2024 13:38:44
  • Zuletzt bearbeitet 21.08.2024 18:47:11

A vulnerability was found in Tenda FH1206 1.2.0.8(8155) and classified as critical. This issue affects the function fromGstDhcpSetSer of the file /goform/GstDhcpSetSer. The manipulation of the argument dips leads to buffer overflow. The attack may be...

8.6

CVE-2024-35340

Exploit
  • EPSS 2.38%
  • Veröffentlicht 24.05.2024 15:15:24
  • Zuletzt bearbeitet 09.04.2025 14:15:03

Tenda FH1206 V1.2.0.8(8155) was discovered to contain a command injection vulnerability via the cmdinput parameter at ip/goform/formexeCommand.

9.8

CVE-2024-35339

Exploit
  • EPSS 4.39%
  • Veröffentlicht 24.05.2024 15:15:24
  • Zuletzt bearbeitet 09.04.2025 14:14:56

Tenda FH1206 V1.2.0.8(8155) was discovered to contain a command injection vulnerability via the mac parameter at ip/goform/WriteFacMac.

9.8

CVE-2024-34945

Exploit
  • EPSS 0.39%
  • Veröffentlicht 14.05.2024 15:39:38
  • Zuletzt bearbeitet 04.04.2025 14:29:20

Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the PPW parameter at ip/goform/WizardHandle.

8.8

CVE-2024-34942

Exploit
  • EPSS 0.52%
  • Veröffentlicht 14.05.2024 15:39:38
  • Zuletzt bearbeitet 04.04.2025 14:46:04

Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter at ip/goform/exeCommand.

9.8

CVE-2024-34943

Exploit
  • EPSS 0.39%
  • Veröffentlicht 14.05.2024 15:39:38
  • Zuletzt bearbeitet 04.04.2025 14:45:54

Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/NatStaticSetting.

8.8

CVE-2024-34944

  • EPSS 0.25%
  • Veröffentlicht 14.05.2024 15:39:38
  • Zuletzt bearbeitet 04.04.2025 14:45:40

Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the list1 parameter at ip/goform/DhcpListClient.