Tenda Fh451 vulnerabilities, page 2

29 vulnerabilities

Known vulnerabilities in Tenda Fh451, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CriticalCVE-2024-46048tenda · fh451_firmwaretenda fh451_firmwareTenda FH451 v1.0.0.9 has a command injection vulnerability in the formexeCommand function iEPSS10.53%7.5HighCVE-2024-46047tenda · fh451_firmwaretenda fh451_firmwareTenda FH451 v1.0.0.9 has a stack overflow vulnerability in the fromDhcpListClient function.EPSS0.61%6.5MediumCVE-2024-12002tenda · fh1201_firmware +3 moreTenda FH451/FH1201/FH1202/FH1206 GetIPTV websReadEvent null pointer dereferenceA vulnerability classified as problematic was found in Tenda FH451, FH1201, FH1202 and FH1206 up to 20241129. Affected by this vulnerability is the function websReadEvent of the file /goform/GetIPTV. The manipulation of the argument Content-Length leads to null pointer dereference. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.EPSS0.80%9CriticalCVE-2026-2911tenda · fh451_firmwareTenda FH451 GstDhcpSetSer buffer overflowA vulnerability has been found in Tenda FH451 up to 1.0.0.9. This issue affects some unknown processing of the file /goform/GstDhcpSetSer. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.EPSS1.17%9CriticalCVE-2026-4535tenda · fh451_firmwareTenda FH451 WrlclientSet stack-based overflowA vulnerability has been found in Tenda FH451 1.0.0.9. This vulnerability affects the function WrlclientSet of the file /goform/WrlclientSet. Such manipulation of the argument GO leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.EPSS1.05%9CriticalCVE-2026-4534tenda · fh451_firmwareTenda FH451 WrlExtraSet formWrlExtraSet stack-based overflowA flaw has been found in Tenda FH451 1.0.0.9. This affects the function formWrlExtraSet of the file /goform/WrlExtraSet. This manipulation of the argument GO causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used.EPSS1.05%9CriticalCVE-2026-3678tenda · fh451_firmwareTenda FH451 AdvSetWan sub_3C434 stack-based overflowA vulnerability was determined in Tenda FH451 1.0.0.9. Affected is the function sub_3C434 of the file /goform/AdvSetWan. This manipulation of the argument wanmode/PPPOEPassword causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.EPSS1.02%9CriticalCVE-2026-3679tenda · f451_firmware +1 moreTenda FH451 QuickIndex formQuickIndex stack-based overflowA vulnerability was identified in Tenda FH451 1.0.0.9. Affected by this vulnerability is the function formQuickIndex of the file /goform/QuickIndex. Such manipulation of the argument mit_linktype/PPPOEPassword leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and might be used.EPSS1.02%9CriticalCVE-2026-3677tenda · fh451_firmwareTenda FH451 setcfm fromSetCfm stack-based overflowA vulnerability was found in Tenda FH451 1.0.0.9. This impacts the function fromSetCfm of the file /goform/setcfm. The manipulation of the argument funcname/funcpara1 results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been made public and could be used.EPSS1.05%