Tenda Fh1202 vulnerabilities, page 2

63 vulnerabilities

Known vulnerabilities in Tenda Fh1202, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9CriticalCVE-2024-2980tenda · fh1202_firmwareTenda FH1202 execCommand formexeCommand stack-based overflowA vulnerability, which was classified as critical, has been found in Tenda FH1202 1.2.0.14(408). This issue affects the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-258149 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.EPSS1.77%8.8HighCVE-2024-2982tenda · fh1202_firmwareTenda FH1202 WriteFacMac formWriteFacMac command injectionA vulnerability has been found in Tenda FH1202 1.2.0.14(408) and classified as critical. Affected by this vulnerability is the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to command injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-258151. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.EPSS8.16%9CriticalCVE-2024-2985tenda · fh1202_firmwareTenda FH1202 QuickIndex formQuickIndex stack-based overflowA vulnerability was found in Tenda FH1202 1.2.0.14(408). It has been declared as critical. This vulnerability affects the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-258154 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.EPSS1.75%9CriticalCVE-2024-2984tenda · fh1202_firmwareTenda FH1202 setcfm formSetCfm stack-based overflowA vulnerability was found in Tenda FH1202 1.2.0.14(408). It has been classified as critical. This affects the function formSetCfm of the file /goform/setcfm. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-258153 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.EPSS1.75%9CriticalCVE-2024-2987tenda · fh1202_firmwareTenda FH1202 GetParentControlInfo stack-based overflowA vulnerability classified as critical has been found in Tenda FH1202 1.2.0.14(408). Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-258156. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.EPSS1.58%6.3MediumCVE-2024-32282tenda · fh1202_firmwaretenda fh1202_firmwareTenda FH1202 v1.2.0.14(408) firmware contains a command injection vulnerablility in the formexeCommand function via the cmdinput parameter.EPSS0.81%4.7MediumCVE-2024-32315tenda · fh1202_firmwaretenda fh1202_firmwareTenda FH1202 v1.2.0.14(408) firmware has a stack overflow vulnerability via the adslPwd parameter in the formWanParameterSetting function.EPSS0.39%6.3MediumCVE-2024-32302tenda · fh1202_firmwaretenda fh1202_firmwareTenda FH1202 v1.2.0.14(408) firmware has a stack overflow vulnerability via the PPW parameter in the fromWizardHandle function.EPSS0.38%6.5MediumCVE-2024-30586tenda · fh1202_firmwaretenda fh1202_firmwareTenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the security_5g parameter of the formWifiBasicSet function.EPSS0.52%8.8HighCVE-2024-30591tenda · fh1202_firmwaretenda fh1202_firmwareTenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the time parameter of the saveParentControlInfo function.EPSS0.69%9.8CriticalCVE-2024-30587tenda · fh1202_firmwaretenda fh1202_firmwareTenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the urls parameter of the saveParentControlInfo function.EPSS0.81%9.8CriticalCVE-2024-30593tenda · fh1202_firmwaretenda fh1202_firmwareTenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability located in the deviceName parameter of the formSetDeviceName function.EPSS0.81%6.5MediumCVE-2024-30590tenda · fh1202_firmwaretenda fh1202_firmwareTenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the schedEndTime parameter of the setSchedWifi function.EPSS0.53%8HighCVE-2024-30583tenda · fh1202_firmwaretenda fh1202_firmwareTenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the mitInterface parameter of the fromAddressNat function.EPSS0.70%6.5MediumCVE-2024-30585tenda · fh1202_firmwaretenda fh1202_firmwareTenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the deviceId parameter of the saveParentControlInfo function.EPSS0.52%9.8CriticalCVE-2024-30595tenda · fh1202_firmwaretenda fh1202_firmwareTenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the deviceId parameter of the addWifiMacFilter function.EPSS0.81%9.8CriticalCVE-2024-30584tenda · fh1202_firmwaretenda fh1202_firmwareTenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the security parameter of the formWifiBasicSet function.EPSS0.85%9.8CriticalCVE-2024-30596tenda · fh1202_firmwaretenda fh1202_firmwareTenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the deviceId parameter of the formSetDeviceName function.EPSS0.85%6.5MediumCVE-2024-30594tenda · fh1202_firmwaretenda fh1202_firmwareTenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the deviceMac parameter of the addWifiMacFilter function.EPSS0.53%9.8CriticalCVE-2024-30589tenda · fh1202_firmwaretenda fh1202_firmwareTenda FH1202 v1.2.0.14(408) firmware has a stack overflow vulnerability in the entrys parameter of the fromAddressNat function.EPSS0.73%