CVE-2022-46538: Tenda f1203 Firmware

Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days.

Tenda F1203 V2.0.1.6 was discovered to contain a command injection vulnerability via the mac parameter at /goform/WriteFacMac.

Affected products

• Tenda f1203 Firmware: version 2.0.1.6 only

Published 2022-12-20. Last modified 2026-06-17.