📦 Fh1201 Firmware

by Tenda

🔍 What is Fh1201 Firmware?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2024-42947

CRITICAL CVSS 9.8 Aug 15, 2024

This vulnerability allows attackers to execute arbitrary commands on Tenda FH1201 routers by sending a specially crafted HTTP request to the /goform/telnet endpoint. Attackers can gain full control of...

CVE-2025-14995

HIGH CVSS 8.8 Dec 21, 2025

A stack-based buffer overflow vulnerability exists in Tenda FH1201 routers version 1.2.0.14(408) affecting the SetIpBind function. Remote attackers can exploit this to execute arbitrary code or cause ...

CVE-2025-14994

HIGH CVSS 8.8 Dec 21, 2025

A stack-based buffer overflow vulnerability in Tenda FH1201 and FH1206 routers allows remote attackers to execute arbitrary code by manipulating the webSiteId parameter in HTTP requests. This affects ...

CVE-2025-7549

HIGH CVSS 8.8 Jul 13, 2025

A critical stack-based buffer overflow vulnerability in Tenda FH1201 routers allows remote attackers to execute arbitrary code by manipulating the 'page' parameter in the frmL7ProtForm function. This ...

CVE-2025-7468

HIGH CVSS 8.8 Jul 12, 2025

A critical buffer overflow vulnerability in Tenda FH1201 routers allows remote attackers to execute arbitrary code by sending specially crafted HTTP POST requests to the /goform/fromSafeUrlFilter endp...

CVE-2025-7465

HIGH CVSS 8.8 Jul 12, 2025

A critical buffer overflow vulnerability in Tenda FH1201 routers allows remote attackers to execute arbitrary code by sending specially crafted HTTP POST requests to the /goform/fromRouteStatic endpoi...

CVE-2025-7463

HIGH CVSS 8.8 Jul 12, 2025

A critical buffer overflow vulnerability in Tenda FH1201 routers allows remote attackers to execute arbitrary code by sending specially crafted HTTP POST requests to the /goform/AdvSetWrlsafeset endpo...

CVE-2025-6110

HIGH CVSS 8.8 Jun 16, 2025

A critical stack-based buffer overflow vulnerability in Tenda FH1201 routers allows remote attackers to execute arbitrary code by manipulating the 'page' argument in the /goform/SafeMacFilter endpoint...

CVE-2024-44859

HIGH CVSS 8.0 Sep 4, 2024

CVE-2024-44859 is a stack buffer overflow vulnerability in the formWrlExtraGet function of Tenda FH1201 routers. This allows attackers to execute arbitrary code remotely by sending specially crafted r...

CVE-2024-42951

HIGH CVSS 7.5 Aug 15, 2024

CVE-2024-42951 is a stack overflow vulnerability in Tenda FH1201 routers that allows attackers to cause Denial of Service (DoS) by sending specially crafted POST requests to the mit_pptpusrpw paramete...

CVE-2024-42955

HIGH CVSS 7.5 Aug 15, 2024

CVE-2024-42955 is a stack overflow vulnerability in Tenda FH1201 routers that allows attackers to cause Denial of Service (DoS) by sending specially crafted POST requests. This affects Tenda FH1201 ro...

CVE-2024-42941

HIGH CVSS 7.5 Aug 15, 2024

This vulnerability in Tenda FH1201 routers allows attackers to trigger a stack overflow via a crafted POST request to the wanmode parameter. Exploitation can cause Denial of Service (DoS) by crashing ...

CVE-2024-42943

HIGH CVSS 7.5 Aug 15, 2024

This vulnerability in Tenda FH1201 routers allows attackers to trigger a stack overflow by sending a specially crafted POST request to the PPPOEPassword parameter. This can cause a Denial of Service (...

CVE-2024-12002

MEDIUM CVSS 4.3 Nov 30, 2024

This vulnerability in Tenda FH series routers allows remote attackers to cause a denial-of-service (DoS) by sending specially crafted requests to the /goform/GetIPTV endpoint. The null pointer derefer...