Tenda F1202 vulnerabilities

CVE-2026-9429 [HIGH] CWE-119 CVE-2026-9429: A vulnerability was found in Tenda F1202 1.2.0.20(408). Affected by this vulnerability is the functi A vulnerability was found in Tenda F1202 1.2.0.20(408). Affected by this vulnerability is the function formWrlExtraSet of the file /goform/WrlExtraSet. Performing a manipulation of the argument delno results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made public and could be used.

CVE-2026-9430 [HIGH] CWE-119 CVE-2026-9430: A vulnerability was determined in Tenda F1202 1.2.0.20(408). Affected by this issue is the function A vulnerability was determined in Tenda F1202 1.2.0.20(408). Affected by this issue is the function formGstDhcpSetSer of the file /goform/GstDhcpSetSerof. Executing a manipulation of the argument dips can lead to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.

CVE-2026-9431 [HIGH] CWE-119 CVE-2026-9431: A vulnerability was identified in Tenda F1202 1.2.0.20(408). This affects the function fromPptpUserA A vulnerability was identified in Tenda F1202 1.2.0.20(408). This affects the function fromPptpUserAdd of the file /goform/PptpUserAdd. The manipulation of the argument opttype leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit is publicly available and might be used.

CVE-2026-9428 [HIGH] CWE-119 CVE-2026-9428: A vulnerability has been found in Tenda F1202 1.2.0.20(408). Affected is the function fromPPTPUserSe A vulnerability has been found in Tenda F1202 1.2.0.20(408). Affected is the function fromPPTPUserSetting of the file /goform/PPTPUserSetting. Such manipulation of the argument delno leads to stack-based buffer overflow. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.

CVE-2025-9806 [LOW] CWE-259 CVE-2025-9806: A vulnerability was determined in Tenda F1202 1.2.0.9/1.2.0.14/1.2.0.20. Impacted is an unknown func A vulnerability was determined in Tenda F1202 1.2.0.9/1.2.0.14/1.2.0.20. Impacted is an unknown function of the file /etc_ro/shadow of the component Administrative Interface. This manipulation with the input Fireitup causes hard-coded credentials. The attack can only be executed locally. A high degree of complexity is needed for the attack. The exploitab

CVE-2024-3877 [HIGH] CWE-121 CVE-2024-3877: A vulnerability classified as critical was found in Tenda F1202 1.2.0.20(408). Affected by this vuln A vulnerability classified as critical was found in Tenda F1202 1.2.0.20(408). Affected by this vulnerability is the function fromqossetting of the file /goform/fromqossetting. The manipulation of the argument qos leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The

CVE-2024-3875 [HIGH] CWE-121 CVE-2024-3875: A vulnerability was found in Tenda F1202 1.2.0.20(408). It has been rated as critical. This issue af A vulnerability was found in Tenda F1202 1.2.0.20(408). It has been rated as critical. This issue affects the function fromNatlimit of the file /goform/Natlimit. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VD

CVE-2024-3876 [HIGH] CWE-121 CVE-2024-3876: A vulnerability classified as critical has been found in Tenda F1202 1.2.0.20(408). Affected is the A vulnerability classified as critical has been found in Tenda F1202 1.2.0.20(408). Affected is the function fromVirtualSer of the file /goform/VirtualSer. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-260910 is th

CVE-2024-3878 [HIGH] CWE-121 CVE-2024-3878: A vulnerability, which was classified as critical, has been found in Tenda F1202 1.2.0.20(408). Affe A vulnerability, which was classified as critical, has been found in Tenda F1202 1.2.0.20(408). Affected by this issue is the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the pu