CVE-2024-42978: Tenda FH1206 Firmware

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

An issue in the handler function in /goform/telnet of Tenda FH1206 v02.03.01.35 allows attackers to execute arbitrary commands via a crafted HTTP request.

Affected products

• Tenda FH1206 Firmware: version v02.03.01.35 only

Published 2024-08-15. Last modified 2026-06-17.