Fh1206 Firmware vulnerabilities | LiveThreat CVE Feed

Product

Fh1206 Firmware

by Tenda · last CVE Dec 21, 2025

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities39 In the news0 Timeline

Severity mix

Critical 9High 26Medium 4Low 0

Severity

All severities39 Critical9 High26 Medium4 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Fh1206 Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-42978	9.8	1%	Aug 15	An issue in the handler function in /goform/telnet of Tenda FH1206 v02.03.01.35 allows attackers to execute arbitrary commands via a crafted HTTP request Affected: v02.03.01.35
CVE-2024-7707	9.8	1%	Aug 13	A vulnerability was found in Tenda FH1206 02.03.01.35 and classified as critical Affected: v02.03.01.35
CVE-2024-7615	9.8	1%	Aug 12	A vulnerability was found in Tenda FH1206 1.2.0.8 Affected: 1.2.0.8(8155)
CVE-2024-7614	9.8	1%	Aug 12	A vulnerability was found in Tenda FH1206 1.2.0.8(8155) Affected: 1.2.0.8(8155)
CVE-2024-7613	9.8	1%	Aug 12	A vulnerability was found in Tenda FH1206 1.2.0.8(8155) and classified as critical Affected: 1.2.0.8(8155)
CVE-2024-35339	9.8	2%	May 24	Tenda FH1206 V1.2.0.8(8155) was discovered to contain a command injection vulnerability via the mac parameter at ip/goform/WriteFacMac Affected: 1.2.0.8(8155)
CVE-2024-34945	9.8	1%	May 14	Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the PPW parameter at ip/goform/WizardHandle Affected: 1.2.0.8(8155)_en
CVE-2024-34943	9.8	1%	May 14	Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/NatStaticSetting Affected: 1.2.0.8(8155)_en
CVE-2024-33215	9.8	1%	Apr 23	Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the mitInterface parameter in ip/goform/addressNat Affected: 1.2.0.8(8155)
CVE-2025-14994	8.8	1%	Dec 21	Tenda FH1201/FH1206 HTTP Request webtypelibrary strcat stack-based overflow Affected: 1.2.0.8(8155)
CVE-2024-44390	8.8	0%	Aug 23	Tenda FH1206 V1.2.0.8(8155)_EN contains a Buffer Overflow vulnerability via the function formWrlsafeset Affected: 1.2.0.8(8155)
CVE-2024-34944	8.8	0%	May 14	Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the list1 parameter at ip/goform/DhcpListClient Affected: 1.2.0.8(8155)_en
CVE-2024-34942	8.8	1%	May 14	Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter at ip/goform/exeCommand Affected: 1.2.0.8(8155)_en
CVE-2024-33212	8.8	1%	Apr 23	Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter in ip/goform/setcfm Affected: 1.2.0.8(8155)
CVE-2024-4020	8.8	2%	Apr 20	A vulnerability was found in Tenda FH1206 1.2.0.8(8155) and classified as critical Affected: 1.2.0.8(8155)
CVE-2024-35340	8.6	2%	May 24	Tenda FH1206 V1.2.0.8(8155) was discovered to contain a command injection vulnerability via the cmdinput parameter at ip/goform/formexeCommand Affected: 1.2.0.8(8155)
CVE-2024-42987	7.5	1%	Aug 15	Tenda FH1206 v02.03.01.35 was discovered to contain a stack-based buffer overflow vulnerability in the fromPptpUserAdd function Affected: v02.03.1.35
CVE-2024-42986	7.5	1%	Aug 15	Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the PPPOEPassword parameter in the fromAdvSetWan function Affected: v02.03.1.35
CVE-2024-42985	7.5	1%	Aug 15	Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromNatlimit function Affected: v02.03.01.35
CVE-2024-42984	7.5	1%	Aug 15	Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromP2pListFilter function Affected: 02.03.01.35
CVE-2024-42983	7.5	1%	Aug 15	Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the pptpPPW parameter in the fromAdvSetWan function Affected: 02.03.01.35
CVE-2024-42982	7.5	1%	Aug 15	Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromVirtualSer function Affected: v02.03.01.35
CVE-2024-42981	7.5	1%	Aug 15	Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the delno parameter in the fromPptpUserSetting function Affected: v02.03.01.35
CVE-2024-42980	7.5	1%	Aug 15	Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the frmL7ImForm function Affected: v02.03.01.35
CVE-2024-42979	7.5	1%	Aug 15	Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the frmL7ProtForm function Affected: 02.03.01.35
CVE-2024-42977	7.5	1%	Aug 15	Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the qos parameter in the fromqossetting function Affected: v02.03.01.35
CVE-2024-42976	7.5	1%	Aug 15	Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromSafeClientFilter function Affected: v02.03.01.35
CVE-2024-42974	7.5	1%	Aug 15	Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromwebExcptypemanFilter function Affected: 02.03.01.35
CVE-2024-42973	7.5	1%	Aug 15	Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromSetlpBind function Affected: 02.03.01.35
CVE-2024-42969	7.5	1%	Aug 15	Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromSafeUrlFilter function Affected: v02.03.01.35
CVE-2024-42968	7.5	1%	Aug 15	Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the Go parameter in the fromSafeUrlFilter function Affected: 02.03.01.35
CVE-2024-33217	7.5	1%	Apr 23	Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the page parameter in ip/goform/addressNat Affected: 1.2.0.8(8155)
CVE-2024-33214	7.5	1%	Apr 23	Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter in ip/goform/RouteStatic Affected: 1.2.0.8(8155)
CVE-2024-44386	7.3	0%	Aug 23	Tenda FH1206 V1.2.0.8(8155)_EN contains a Buffer Overflow vulnerability via the function fromSetIpBind Affected: 1.2.0.8(8155)_en
CVE-2024-33211	7.3	0%	Apr 23	Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the PPPOEPassword parameter in ip/goform/QuickIndex Affected: 1.2.0.8(8155)
CVE-2024-12002	6.5	1%	Nov 30	A vulnerability classified as problematic was found in Tenda FH451, FH1201, FH1202 and FH1206 up to 20241129 Affected: 1.2.0.8(8155)
CVE-2024-44387	6.5	0%	Aug 23	Tenda FH1206 V1.2.0.8(8155)_EN contains a Buffer Overflow vulnerability via the functino formWrlExtraGet Affected: 1.2.0.8(8155)
CVE-2024-34946	6.5	1%	May 14	Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/DhcpListClient Affected: 1.2.0.8(8155)_en
CVE-2024-33213	6.5	0%	Apr 23	Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the mitInterface parameter in ip/goform/RouteStatic Affected: 1.2.0.8(8155)