FH1202

CVEs (189)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2026-6195	Totolink A7100RU	Cri	0.65	9.8	0.14	Apr 13, 2026	A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this issue is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument admpass leads to os command injection. The…
CVE-2026-5853	Totolink A7100RU	Cri	0.65	9.8	0.14	Apr 9, 2026	A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this vulnerability is the function setIpv6LanCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument addrPrefixLen leads to os command…
CVE-2026-6154	Totolink A7100RU	Cri	0.64	9.8	0.02	Apr 13, 2026	A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. The affected element is the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation of the argument wizard results in os command injection. The…
CVE-2026-6029	Totolink A7100RU	Cri	0.64	9.8	0.03	Apr 10, 2026	A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. The affected element is the function setVpnAccountCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument User results in os command injection. The attack may be…
CVE-2026-6026	Totolink A7100RU	Cri	0.64	9.8	0.03	Apr 10, 2026	A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. This vulnerability affects the function setPortalConfWeChat of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation of the argument enable results in os command…
CVE-2024-42978	Tenda FH1206	Cri	0.64	9.8	0.01	Aug 15, 2024	An issue in the handler function in /goform/telnet of Tenda FH1206 v02.03.01.35 allows attackers to execute arbitrary commands via a crafted HTTP request.
CVE-2024-42947	Tenda FH1201	Cri	0.64	9.8	0.01	Aug 15, 2024	An issue in the handler function in /goform/telnet of Tenda FH1201 v1.2.0.14 (408) allows attackers to execute arbitrary commands via a crafted HTTP request.
CVE-2024-41473	Tenda FH1201	Cri	0.64	9.8	0.07	Jul 25, 2024	Tenda FH1201 v1.2.0.14 was discovered to contain a command injection vulnerability via the mac parameter at ip/goform/WriteFacMac
CVE-2024-41468	Tenda FH1201	Cri	0.64	9.8	0.05	Jul 25, 2024	Tenda FH1201 v1.2.0.14 was discovered to contain a command injection vulnerability via the cmdinput parameter at /goform/exeCommand
CVE-2024-41461	Tenda FH1201	Cri	0.64	9.8	0.01	Jul 24, 2024	Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the list1 parameter at ip/goform/DhcpListClient.
CVE-2024-41460	Tenda FH1201	Cri	0.64	9.8	0.01	Jul 24, 2024	Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter at ip/goform/RouteStatic.
CVE-2024-41459	Tenda FH1201	Cri	0.64	9.8	0.01	Jul 24, 2024	Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the PPPOEPassword parameter at ip/goform/QuickIndex.
CVE-2024-35339	Tenda FH1206	Cri	0.64	9.8	0.02	May 24, 2024	Tenda FH1206 V1.2.0.8(8155) was discovered to contain a command injection vulnerability via the mac parameter at ip/goform/WriteFacMac.
CVE-2024-34945	Tenda FH1206	Cri	0.64	9.8	0.01	May 14, 2024	Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the PPW parameter at ip/goform/WizardHandle.
CVE-2024-34943	Tenda FH1206	Cri	0.64	9.8	0.01	May 14, 2024	Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/NatStaticSetting.
CVE-2024-33215	Tenda FH1206	Cri	0.64	9.8	0.01	Apr 23, 2024	Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the mitInterface parameter in ip/goform/addressNat.
CVE-2024-30630	Tenda FH1205	Cri	0.64	9.8	0.01	Mar 29, 2024	Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the time parameter from saveParentControlInfo function.
CVE-2024-30628	Tenda FH1205	Cri	0.64	9.8	0.01	Mar 29, 2024	Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the page parameter from fromAddressNat function.
CVE-2024-30622	Tenda FH1205	Cri	0.64	9.8	0.01	Mar 29, 2024	Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the mitInterface parameter from fromAddressNat function.
CVE-2024-30602	Tenda FH1203	Cri	0.64	9.8	0.01	Mar 28, 2024	Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the schedStartTime parameter of the setSchedWifi function.

CVE-2026-6195CriApr 13, 2026
Totolink
A7100RU
risk 0.65cvss 9.8epss 0.14
A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this issue is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument admpass leads to os command injection. The…
CVE-2026-5853CriApr 9, 2026
Totolink
A7100RU
risk 0.65cvss 9.8epss 0.14
A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this vulnerability is the function setIpv6LanCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument addrPrefixLen leads to os command…
CVE-2026-6154CriApr 13, 2026
Totolink
A7100RU
risk 0.64cvss 9.8epss 0.02
A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. The affected element is the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation of the argument wizard results in os command injection. The…
CVE-2026-6029CriApr 10, 2026
Totolink
A7100RU
risk 0.64cvss 9.8epss 0.03
A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. The affected element is the function setVpnAccountCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument User results in os command injection. The attack may be…
CVE-2026-6026CriApr 10, 2026
Totolink
A7100RU
risk 0.64cvss 9.8epss 0.03
A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. This vulnerability affects the function setPortalConfWeChat of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation of the argument enable results in os command…
CVE-2024-42978CriAug 15, 2024
Tenda
FH1206
risk 0.64cvss 9.8epss 0.01
An issue in the handler function in /goform/telnet of Tenda FH1206 v02.03.01.35 allows attackers to execute arbitrary commands via a crafted HTTP request.
CVE-2024-42947CriAug 15, 2024
Tenda
FH1201
risk 0.64cvss 9.8epss 0.01
An issue in the handler function in /goform/telnet of Tenda FH1201 v1.2.0.14 (408) allows attackers to execute arbitrary commands via a crafted HTTP request.
CVE-2024-41473CriJul 25, 2024
Tenda
FH1201
risk 0.64cvss 9.8epss 0.07
Tenda FH1201 v1.2.0.14 was discovered to contain a command injection vulnerability via the mac parameter at ip/goform/WriteFacMac
CVE-2024-41468CriJul 25, 2024
Tenda
FH1201
risk 0.64cvss 9.8epss 0.05
Tenda FH1201 v1.2.0.14 was discovered to contain a command injection vulnerability via the cmdinput parameter at /goform/exeCommand
CVE-2024-41461CriJul 24, 2024
Tenda
FH1201
risk 0.64cvss 9.8epss 0.01
Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the list1 parameter at ip/goform/DhcpListClient.
CVE-2024-41460CriJul 24, 2024
Tenda
FH1201
risk 0.64cvss 9.8epss 0.01
Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter at ip/goform/RouteStatic.
CVE-2024-41459CriJul 24, 2024
Tenda
FH1201
risk 0.64cvss 9.8epss 0.01
Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the PPPOEPassword parameter at ip/goform/QuickIndex.
CVE-2024-35339CriMay 24, 2024
Tenda
FH1206
risk 0.64cvss 9.8epss 0.02
Tenda FH1206 V1.2.0.8(8155) was discovered to contain a command injection vulnerability via the mac parameter at ip/goform/WriteFacMac.
CVE-2024-34945CriMay 14, 2024
Tenda
FH1206
risk 0.64cvss 9.8epss 0.01
Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the PPW parameter at ip/goform/WizardHandle.
CVE-2024-34943CriMay 14, 2024
Tenda
FH1206
risk 0.64cvss 9.8epss 0.01
Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/NatStaticSetting.
CVE-2024-33215CriApr 23, 2024
Tenda
FH1206
risk 0.64cvss 9.8epss 0.01
Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the mitInterface parameter in ip/goform/addressNat.
CVE-2024-30630CriMar 29, 2024
Tenda
FH1205
risk 0.64cvss 9.8epss 0.01
Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the time parameter from saveParentControlInfo function.
CVE-2024-30628CriMar 29, 2024
Tenda
FH1205
risk 0.64cvss 9.8epss 0.01
Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the page parameter from fromAddressNat function.
CVE-2024-30622CriMar 29, 2024
Tenda
FH1205
risk 0.64cvss 9.8epss 0.01
Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the mitInterface parameter from fromAddressNat function.
CVE-2024-30602CriMar 28, 2024
Tenda
FH1203
risk 0.64cvss 9.8epss 0.01
Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the schedStartTime parameter of the setSchedWifi function.

Page 1 of 10