VYPR

FH1206

by Tenda

CVEs (39)

  • CVE-2024-42983HigAug 15, 2024
    risk 0.49cvss 7.5epss 0.01

    Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the pptpPPW parameter in the fromAdvSetWan function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

  • CVE-2024-42982HigAug 15, 2024
    risk 0.49cvss 7.5epss 0.01

    Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromVirtualSer function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

  • CVE-2024-42981HigAug 15, 2024
    risk 0.49cvss 7.5epss 0.01

    Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the delno parameter in the fromPptpUserSetting function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

  • CVE-2024-42980HigAug 15, 2024
    risk 0.49cvss 7.5epss 0.01

    Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the frmL7ImForm function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

  • CVE-2024-42979HigAug 15, 2024
    risk 0.49cvss 7.5epss 0.01

    Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the frmL7ProtForm function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

  • CVE-2024-42977HigAug 15, 2024
    risk 0.49cvss 7.5epss 0.01

    Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the qos parameter in the fromqossetting function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

  • CVE-2024-42976HigAug 15, 2024
    risk 0.49cvss 7.5epss 0.01

    Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromSafeClientFilter function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

  • CVE-2024-42974HigAug 15, 2024
    risk 0.49cvss 7.5epss 0.01

    Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromwebExcptypemanFilter function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

  • CVE-2024-42973HigAug 15, 2024
    risk 0.49cvss 7.5epss 0.01

    Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromSetlpBind function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

  • CVE-2024-42969HigAug 15, 2024
    risk 0.49cvss 7.5epss 0.01

    Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromSafeUrlFilter function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

  • CVE-2024-42968HigAug 15, 2024
    risk 0.49cvss 7.5epss 0.01

    Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the Go parameter in the fromSafeUrlFilter function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

  • CVE-2024-33217HigApr 23, 2024
    risk 0.49cvss 7.5epss 0.01

    Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the page parameter in ip/goform/addressNat.

  • CVE-2024-33214HigApr 23, 2024
    risk 0.49cvss 7.5epss 0.01

    Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter in ip/goform/RouteStatic.

  • CVE-2024-44386HigAug 23, 2024
    risk 0.47cvss 7.3epss 0.00

    Tenda FH1206 V1.2.0.8(8155)_EN contains a Buffer Overflow vulnerability via the function fromSetIpBind.

  • CVE-2024-33211HigApr 23, 2024
    risk 0.47cvss 7.3epss 0.00

    Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the PPPOEPassword parameter in ip/goform/QuickIndex.

  • CVE-2024-44387MedAug 23, 2024
    risk 0.42cvss 6.5epss 0.00

    Tenda FH1206 V1.2.0.8(8155)_EN contains a Buffer Overflow vulnerability via the functino formWrlExtraGet.

  • CVE-2024-34946MedMay 14, 2024
    risk 0.42cvss 6.5epss 0.01

    Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/DhcpListClient.

  • CVE-2024-33213MedApr 23, 2024
    risk 0.42cvss 6.5epss 0.00

    Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the mitInterface parameter in ip/goform/RouteStatic.

  • CVE-2024-12002MedNov 30, 2024
    risk 0.28cvss 4.3epss 0.01

    A vulnerability classified as problematic was found in Tenda FH451, FH1201, FH1202 and FH1206 up to 20241129. Affected by this vulnerability is the function websReadEvent of the file /goform/GetIPTV. The manipulation of the argument Content-Length leads to null pointer…

Page 2 of 2