Tenda FH1201 Firmware vulnerabilities

25 CVEs affecting Tenda FH1201 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-5046, published 2026-03-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-42948, published 2024-08-15. High severity, CVSS 7.5. EPSS: 10.6% chance of exploitation in the next 30 days. Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the delno parameter in the fromPptpUserSetting function. This vulnerability allows attackers to cause a Denial of Service…
CVE-2025-6110, published 2025-06-16. High severity, CVSS 8.8. EPSS: 5.5% chance of exploitation in the next 30 days. A vulnerability classified as critical has been found in Tenda FH1201 1.2.0.14(408). This affects an unknown part of the file /goform/SafeMacFilter. The manipulation of the argument page leads to…
CVE-2025-7551, published 2025-07-14. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability was found in Tenda FH1201 1.2.0.14(408). It has been declared as critical. Affected by this vulnerability is the function fromPptpUserAdd of the file /goform/PPTPDClient. The…
CVE-2025-7463, published 2025-07-12. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability was found in Tenda FH1201 1.2.0.14. It has been declared as critical. This vulnerability affects the function formWrlsafeset of the file /goform/AdvSetWrlsafeset of the component HTTP…
CVE-2026-5046, published 2026-03-29. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A flaw has been found in Tenda FH1201 1.2.0.14(408). Affected is the function formWrlExtraSet of the file /goform/WrlExtraSet of the component Parameter Handler. Executing a manipulation of the…
CVE-2026-5045, published 2026-03-29. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was detected in Tenda FH1201 1.2.0.14(408). This impacts the function WrlclientSet of the file /goform/WrlclientSet of the component Parameter Handler. Performing a manipulation of…
CVE-2024-42947, published 2024-08-15. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. An issue in the handler function in /goform/telnet of Tenda FH1201 v1.2.0.14 (408) allows attackers to execute arbitrary commands via a crafted HTTP request.
CVE-2025-7550, published 2025-07-13. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was found in Tenda FH1201 1.2.0.14(408). It has been classified as critical. Affected is the function fromGstDhcpSetSer of the file /goform/GstDhcpSetSer. The manipulation of the…
CVE-2025-7549, published 2025-07-13. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was found in Tenda FH1201 1.2.0.14(408) and classified as critical. This issue affects the function frmL7ProtForm of the file /goform/L7Prot. The manipulation of the argument page…
CVE-2025-7548, published 2025-07-13. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability has been found in Tenda FH1201 1.2.0.14(408) and classified as critical. This vulnerability affects the function formSafeEmailFilter of the file /goform/SafeEmailFilter. The…

Latest

CVE-2025-14995, published 2025-12-21. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability has been found in Tenda FH1201 1.2.0.14(408). Affected is the function sprintf of the file /goform/SetIpBind. Such manipulation of the argument page leads to stack-based buffer…
CVE-2025-14994, published 2025-12-21. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. A flaw has been found in Tenda FH1201 and FH1206 1.2.0.14(408)/1.2.0.8(8155). This impacts the function strcat of the file /goform/webtypelibrary of the component HTTP Request Handler. This…
CVE-2025-7468, published 2025-07-12. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability has been found in Tenda FH1201 1.2.0.14 and classified as critical. This vulnerability affects the function fromSafeUrlFilter of the file /goform/fromSafeUrlFilter of the component…
CVE-2025-7465, published 2025-07-12. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability classified as critical was found in Tenda FH1201 1.2.0.14. Affected by this vulnerability is the function fromRouteStatic of the file /goform/fromRouteStatic of the component HTTP…