📦 Fh1202 Firmware

by Tenda

🔍 What is Fh1202 Firmware?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2024-30584

CRITICAL CVSS 9.8 Mar 28, 2024

This CVE describes a stack overflow vulnerability in Tenda FH1202 routers that allows remote code execution. Attackers can exploit the vulnerability by sending specially crafted requests to the affect...

CVE-2024-30587

CRITICAL CVSS 9.8 Mar 28, 2024

CVE-2024-30587 is a critical stack overflow vulnerability in Tenda FH1202 routers that allows remote code execution. Attackers can exploit the 'urls' parameter in the saveParentControlInfo function to...

CVE-2024-30589

CRITICAL CVSS 9.8 Mar 28, 2024

This CVE describes a stack overflow vulnerability in Tenda FH1202 routers that allows remote code execution. Attackers can exploit the 'entrys' parameter in the fromAddressNat function to crash the de...

CVE-2024-30596

CRITICAL CVSS 9.8 Mar 28, 2024

This CVE describes a stack overflow vulnerability in Tenda FH1202 routers that allows remote code execution by sending specially crafted data to the deviceId parameter. Attackers can exploit this to t...

CVE-2024-30593

CRITICAL CVSS 9.8 Mar 28, 2024

This CVE describes a stack overflow vulnerability in Tenda FH1202 routers that allows remote attackers to execute arbitrary code by sending specially crafted requests to the deviceName parameter. The ...

CVE-2024-30595

CRITICAL CVSS 9.8 Mar 28, 2024

This vulnerability allows remote attackers to execute arbitrary code on Tenda FH1202 routers by exploiting a stack overflow in the addWifiMacFilter function. Attackers can gain full control of affecte...

CVE-2023-38932

CRITICAL CVSS 9.8 Aug 7, 2023

This vulnerability allows remote attackers to execute arbitrary code on affected Tenda routers via a stack overflow in the SafeEmailFilter function. Attackers can exploit this by sending specially cra...

CVE-2023-38938

CRITICAL CVSS 9.8 Aug 7, 2023

This vulnerability is a stack overflow in Tenda routers' web interface that allows remote code execution. Attackers can exploit it by sending specially crafted requests to the /L7Im endpoint. Users of...

CVE-2023-37715

CRITICAL CVSS 9.8 Jul 14, 2023

This vulnerability is a stack overflow in Tenda F1202 and FH1202 routers that allows remote code execution. Attackers can exploit it by sending specially crafted requests to the vulnerable frmL7ProtFo...

CVE-2023-37717

CRITICAL CVSS 9.8 Jul 14, 2023

This vulnerability allows remote attackers to execute arbitrary code on affected Tenda routers via a stack overflow in the fromDhcpListClient function. Attackers can exploit this by sending specially ...

CVE-2023-37719

CRITICAL CVSS 9.8 Jul 14, 2023

CVE-2023-37719 is a critical stack overflow vulnerability in Tenda F1202 and FH1202 routers that allows remote code execution. Attackers can exploit this by sending specially crafted requests to the v...

CVE-2023-37722

CRITICAL CVSS 9.8 Jul 14, 2023

This vulnerability allows remote attackers to execute arbitrary code on affected Tenda routers via a stack overflow in the fromSafeUrlFilter function. Attackers can exploit this by sending specially c...

CVE-2025-7531

HIGH CVSS 8.8 Jul 13, 2025

A critical stack-based buffer overflow vulnerability in Tenda FH1202 routers allows remote attackers to execute arbitrary code by manipulating the 'delno' parameter in the PPTPUserSetting function. Th...

CVE-2025-7529

HIGH CVSS 8.8 Jul 13, 2025

A critical stack-based buffer overflow vulnerability in Tenda FH1202 routers allows remote attackers to execute arbitrary code by manipulating the 'page' parameter in the fromNatlimit function. This a...

CVE-2025-7527

HIGH CVSS 8.8 Jul 13, 2025

A critical stack-based buffer overflow vulnerability in Tenda FH1202 routers allows remote attackers to execute arbitrary code by manipulating the PPPOEPassword parameter. This affects Tenda FH1202 fi...

CVE-2025-5978

HIGH CVSS 8.8 Jun 10, 2025

A critical stack-based buffer overflow vulnerability in Tenda FH1202 routers allows remote attackers to execute arbitrary code by manipulating the 'page' parameter in the fromVirtualSer function. This...

CVE-2024-30591

HIGH CVSS 8.8 Mar 28, 2024

CVE-2024-30591 is a stack overflow vulnerability in Tenda FH1202 routers that allows remote code execution via the time parameter in the saveParentControlInfo function. Attackers can exploit this to t...

CVE-2024-30583

HIGH CVSS 8.0 Mar 28, 2024

This CVE describes a stack overflow vulnerability in Tenda FH1202 routers that allows remote code execution. Attackers can exploit the mitInterface parameter in the fromAddressNat function to crash th...

CVE-2024-2985

HIGH CVSS 8.8 Mar 27, 2024

A critical stack-based buffer overflow vulnerability in Tenda FH1202 routers allows remote attackers to execute arbitrary code by manipulating the PPPOEPassword parameter. This affects Tenda FH1202 fi...

CVE-2024-2987

HIGH CVSS 8.8 Mar 27, 2024

A critical stack-based buffer overflow vulnerability in Tenda FH1202 routers allows remote attackers to execute arbitrary code by manipulating the 'mac' parameter in the GetParentControlInfo function....

CVE-2024-2983

HIGH CVSS 8.8 Mar 27, 2024

This critical vulnerability in Tenda FH1202 routers allows remote attackers to execute arbitrary code via a stack-based buffer overflow in the formSetClientState function. Attackers can exploit this b...

CVE-2024-2980

HIGH CVSS 8.8 Mar 27, 2024

This critical vulnerability in Tenda FH1202 routers allows remote attackers to execute arbitrary code via a stack-based buffer overflow in the formexeCommand function. Attackers can exploit this witho...

CVE-2025-3237

MEDIUM CVSS 5.3 Apr 4, 2025

This vulnerability in Tenda FH1202 routers allows attackers to bypass access controls via the /goform/wrlwpsset endpoint, potentially enabling unauthorized configuration changes or system compromise. ...

CVE-2025-2996

MEDIUM CVSS 5.3 Mar 31, 2025

This vulnerability in Tenda FH1202 routers allows attackers to bypass access controls on the web management interface's SysToolDDNS component. Attackers can exploit this remotely to potentially gain u...

CVE-2025-2993

MEDIUM CVSS 5.3 Mar 31, 2025

This critical vulnerability in Tenda FH1202 routers allows improper access controls through manipulation of the /default.cfg file, potentially enabling unauthorized remote access. Attackers can exploi...

CVE-2025-2991

MEDIUM CVSS 5.3 Mar 31, 2025

This critical vulnerability in Tenda FH1202 routers allows remote attackers to bypass access controls via the web management interface. Attackers can exploit the /goform/AdvSetWrlmacfilter endpoint wi...

CVE-2025-2990

MEDIUM CVSS 5.3 Mar 31, 2025

This critical vulnerability in Tenda FH1202 routers allows attackers to bypass access controls via the /goform/AdvSetWrlGstset endpoint in the web management interface. Attackers can remotely exploit ...

CVE-2024-12002

MEDIUM CVSS 4.3 Nov 30, 2024

This vulnerability in Tenda FH series routers allows remote attackers to cause a denial-of-service (DoS) by sending specially crafted requests to the /goform/GetIPTV endpoint. The null pointer derefer...