Tenda F1202 Firmware vulnerabilities

CVE-2025-9806 [MEDIUM] CWE-259 CVE-2025-9806: A vulnerability was determined in Tenda F1202 1.2.0.9/1.2.0.14/1.2.0.20. Impacted is an unknown func A vulnerability was determined in Tenda F1202 1.2.0.9/1.2.0.14/1.2.0.20. Impacted is an unknown function of the file /etc_ro/shadow of the component Administrative Interface. This manipulation with the input Fireitup causes hard-coded credentials. The attack can only be executed locally. A high degree of complexity is needed for the attack. The exploi

CVE-2024-30639 [MEDIUM] CWE-121 CVE-2024-30639: Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability in the page parameter of fromAddressNa Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability in the page parameter of fromAddressNat function.

CVE-2024-30636 [MEDIUM] CWE-121 CVE-2024-30636: Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability via the PPPOEPassword parameter in the Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability via the PPPOEPassword parameter in the formQuickIndex function.

CVE-2024-30638 [MEDIUM] CWE-121 CVE-2024-30638: Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability via the entrys parameter in the fromAd Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability via the entrys parameter in the fromAddressNat function.