CVE-2025-2994

Medium CVSS: 6.9

A vulnerability, which was classified as critical, was found in Tenda FH1202 1.2.0.14(408). This affects an unknown part of the file /goform/qossetting of the component Web Management Interface. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Vendor

Tenda

Product

Fh1202 Firmware

CWE

CWE-266

Yayın Tarihi

2025-03-31 12:15:15

Güncelleme

2025-04-07 14:38:29

Source Identifier

cna@vuldb.com

KEV Date Added

Kategoriler

CWE-266 Fh1202 Firmware MEDIUM Tenda 2025

Referanslar

https://lavender-bicycle-a5a.notion.site/Tenda-FH1202-qossetting-1bc53a41781f80a2aa2fde152bf948b5?pvs=4 https://vuldb.com/?ctiid.302043 https://vuldb.com/?id.302043 https://vuldb.com/?submit.523417 https://www.tenda.com.cn/ https://lavender-bicycle-a5a.notion.site/Tenda-FH1202-qossetting-1bc53a41781f80a2aa2fde152bf948b5

Benzer Kayıtlar

Medium

CVE-2026-5339

A vulnerability was detected in Tenda G103 1.0.0.5. The impacted element is the function action_set_net_settings of the…

High

CVE-2026-5204

A vulnerability was determined in Tenda CH22 1.0.0.1. Affected is the function formWebTypeLibrary of the file /goform/we…

High

CVE-2026-5156

A vulnerability was determined in Tenda CH22 1.0.0.1. This impacts the function formQuickIndex of the file /goform/Quick…

High

CVE-2026-5155

A vulnerability was found in Tenda CH22 1.0.0.1. This affects the function fromAdvSetWan of the file /goform/AdvSetWan o…

Medium

CVE-2026-5153

A flaw has been found in Tenda CH22 1.0.0.1. The affected element is the function FormWriteFacMac of the file /goform/Wr…

High

CVE-2026-5152

A vulnerability was detected in Tenda CH22 1.0.0.1. Impacted is the function formCreateFileName of the file /goform/crea…