fh1206 firmware vulnerabilities and fixes

Recent CVEs affecting fh1206 firmware, with upgrade or downgrade steps. 21 tracked.

Also searched as: fh1206firmware.

fh1206 firmware has 21 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-11-30. Highest priority: CVE-2024-42978 (score 62/100).

• CVE-2024-7707 HIGH 8.8 MITIGATE A vulnerability was found in Tenda FH1206 02.03.01.35 and classified as critical
• CVE-2024-7615 HIGH 8.8 MITIGATE A vulnerability was found in Tenda FH1206 1.2.0.8
• CVE-2024-7614 HIGH 8.8 MITIGATE A vulnerability was found in Tenda FH1206 1.2.0.8(8155)
• CVE-2024-7613 HIGH 8.8 MITIGATE A vulnerability was found in Tenda FH1206 1.2.0.8(8155) and classified as critical
• CVE-2024-42987 HIGH 7.5 MITIGATE Tenda FH1206 v02.03.01.35 was discovered to contain a stack-based buffer overflow vulnerability in the fromPpt
• CVE-2024-42986 HIGH 7.5 MITIGATE Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the PPPOEPassword parameter in the fr
• CVE-2024-42985 HIGH 7.5 MITIGATE Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromNatlimi
• CVE-2024-42984 HIGH 7.5 MITIGATE Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromP2pList
• CVE-2024-42983 HIGH 7.5 MITIGATE Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the pptpPPW parameter in the fromAdvS
• CVE-2024-42982 HIGH 7.5 MITIGATE Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromVirtual
• CVE-2024-42981 HIGH 7.5 MITIGATE Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the delno parameter in the fromPptpUs
• CVE-2024-42980 HIGH 7.5 MITIGATE Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the frmL7ImForm
• CVE-2024-42979 HIGH 7.5 MITIGATE Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the frmL7ProtFo
• CVE-2024-42978 CRITICAL 9.8 MITIGATE An issue in the handler function in /goform/telnet of Tenda FH1206 v02.03.01.35 allows attackers to execute ar
• CVE-2024-42977 HIGH 7.5 MITIGATE Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the qos parameter in the fromqossetti
• CVE-2024-42976 HIGH 7.5 MITIGATE Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromSafeCli
• CVE-2024-42974 HIGH 7.5 MITIGATE Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromwebExcp
• CVE-2024-42973 HIGH 7.5 MITIGATE Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromSetlpBi
• CVE-2024-42969 HIGH 7.5 MITIGATE Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromSafeUrl
• CVE-2024-42968 HIGH 7.5 MITIGATE Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the Go parameter in the fromSafeUrlFi
• CVE-2024-12002 MEDIUM 4.3 MITIGATE MITIGATE A vulnerability classified as problematic was found in Tenda FH451, FH1201, FH1202 and FH1206 up to 20241129

FAQ

How do I fix fh1206 firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is fh1206 firmware being exploited right now?

None of the tracked fh1206 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which fh1206 firmware CVE should I patch first?

CVE-2024-42978 currently ranks highest (62/100): An issue in the handler function in /goform/telnet of Tenda FH1206 v02.03.01.35 allows attackers to execute ar.

RSS feed for fh1206 firmware · ← Back to latest CVEs