CVE-2023-38939: Tenda f1202 Firmware

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Tenda F1202 V1.2.0.9 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the mit_ssid parameter in the formWrlsafeset function.

Affected products

• Tenda f1202 Firmware: version 1.2.0.9 only
• Tenda FH1202 Firmware: version 1.2.0.9 only

Published 2023-08-07. Last modified 2026-06-17.