Tenda f1202 Firmware vulnerabilities

24 CVEs affecting Tenda f1202 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-9806, published 2025-09-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-3877, published 2024-04-16. High severity, CVSS 8.8. EPSS: 1.8% chance of exploitation in the next 30 days. A vulnerability classified as critical was found in Tenda F1202 1.2.0.20(408). Affected by this vulnerability is the function fromqossetting of the file /goform/fromqossetting. The manipulation of…
CVE-2024-30637, published 2024-03-29. High severity, CVSS 8.8. EPSS: 1.8% chance of exploitation in the next 30 days. Tenda F1202 v1.2.0.20(408) has a command injection vulnerablility in the formWriteFacMac function in the mac parameter.
CVE-2024-3878, published 2024-04-16. High severity, CVSS 8.8. EPSS: 1.7% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, has been found in Tenda F1202 1.2.0.20(408). Affected by this issue is the function fromwebExcptypemanFilter of the file…
CVE-2024-3876, published 2024-04-16. High severity, CVSS 8.8. EPSS: 1.7% chance of exploitation in the next 30 days. A vulnerability classified as critical has been found in Tenda F1202 1.2.0.20(408). Affected is the function fromVirtualSer of the file /goform/VirtualSer. The manipulation of the argument page leads…
CVE-2024-3875, published 2024-04-16. High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days. A vulnerability was found in Tenda F1202 1.2.0.20(408). It has been rated as critical. This issue affects the function fromNatlimit of the file /goform/Natlimit. The manipulation of the argument page…
CVE-2023-37712, published 2023-07-10. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. Tenda AC1206 V15.03.06.23, F1202 V1.2.0.20(408), and FH1202 V1.2.0.20(408) were discovered to contain a stack overflow in the page parameter in the fromSetIpBind function.
CVE-2023-38932, published 2023-08-07. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the page parameter in the SafeEmailFilter function.
CVE-2023-37723, published 2023-07-14. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromqossetting.
CVE-2023-37722, published 2023-07-14. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromSafeUrlFilter.
CVE-2023-37721, published 2023-07-14. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromSafeMacFilter.

Latest

CVE-2025-9806, published 2025-09-02. Medium severity, CVSS 6.4. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability was determined in Tenda F1202 1.2.0.9/1.2.0.14/1.2.0.20. Impacted is an unknown function of the file /etc_ro/shadow of the component Administrative Interface. This manipulation with…
CVE-2024-30639, published 2024-03-29. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability in the page parameter of fromAddressNat function.
CVE-2024-30638, published 2024-03-29. Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days. Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability via the entrys parameter in the fromAddressNat function.
CVE-2024-30636, published 2024-03-29. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability via the PPPOEPassword parameter in the formQuickIndex function.
CVE-2024-30635, published 2024-03-29. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability located in the funcpara1 parameter in the formSetCfm function.