CVE-2024-35340: Tenda FH1206 Firmware

High severity, CVSS 8.6. EPSS: 1.2% chance of exploitation in the next 30 days.

Tenda FH1206 V1.2.0.8(8155) was discovered to contain a command injection vulnerability via the cmdinput parameter at ip/goform/formexeCommand.

Affected products

• Tenda FH1206 Firmware: version 1.2.0.8(8155) only

Published 2024-05-24. Last modified 2026-06-17.