Tenda FH1203 Firmware vulnerabilities

35 CVEs affecting Tenda FH1203 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-69700, published 2026-02-23.

More from Tenda.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-2991, published 2024-03-27. High severity, CVSS 8.8. EPSS: 7.6% chance of exploitation in the next 30 days. A vulnerability has been found in Tenda FH1203 2.0.1.6 and classified as critical. This vulnerability affects the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the…
• CVE-2025-69700, published 2026-02-23. High severity, CVSS 7.5. EPSS: 3.7% chance of exploitation in the next 30 days. Tenda FH1203 V2.0.1.6 contains a stack-based buffer overflow vulnerability in the modify_add_client_prio function, which is reachable via the formSetClientPrio CGI handler.
• CVE-2024-2992, published 2024-03-27. High severity, CVSS 8.8. EPSS: 1.7% chance of exploitation in the next 30 days. A vulnerability was found in Tenda FH1203 2.0.1.6 and classified as critical. This issue affects the function formSetCfm of the file /goform/setcfm. The manipulation of the argument funcpara1 leads…
• CVE-2024-2993, published 2024-03-27. High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days. A vulnerability was found in Tenda FH1203 2.0.1.6. It has been classified as critical. Affected is the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument…
• CVE-2024-2989, published 2024-03-27. High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, has been found in Tenda FH1203 2.0.1.6. Affected by this issue is the function fromNatStaticSetting of the file /goform/NatStaticSetting. The…
• CVE-2024-2988, published 2024-03-27. High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days. A vulnerability classified as critical was found in Tenda FH1203 2.0.1.6. Affected by this vulnerability is the function fromSetRouteStatic of the file /goform/fromRouteStatic. The manipulation of…
• CVE-2024-2994, published 2024-03-27. High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability was found in Tenda FH1203 2.0.1.6. It has been declared as critical. Affected by this vulnerability is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The…
• CVE-2024-2990, published 2024-03-27. High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, was found in Tenda FH1203 2.0.1.6. This affects the function formexeCommand of the file /goform/execCommand. The manipulation of the argument…
• CVE-2025-6113, published 2025-06-16. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, was found in Tenda FH1203 2.0.1.6. Affected is the function fromadvsetlanip of the file /goform/AdvSetLanip. The manipulation of the argument…
• CVE-2023-37706, published 2023-07-10. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the entrys parameter in the fromAddressNat function.

Latest

• CVE-2024-32311, published 2024-04-17. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. Tenda FH1203 v2.0.1.6 firmware has a stack overflow vulnerability via the adslPwd parameter in the formWanParameterSetting function.
• CVE-2024-32299, published 2024-04-17. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. Tenda FH1203 v2.0.1.6 firmware has a stack overflow vulnerability via the PPW parameter in the fromWizardHandle function.
• CVE-2024-32283, published 2024-04-17. High severity, CVSS 7.3. EPSS: 0.9% chance of exploitation in the next 30 days. Tenda FH1203 V2.0.1.6 firmware has a command injection vulnerablility in formexeCommand function via the cmdinput parameter.
• CVE-2024-30604, published 2024-03-28. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the list1 parameter of the fromDhcpListClient function.
• CVE-2024-30603, published 2024-03-28. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the urls parameter of the saveParentControlInfo function.
• CVE-2024-30602, published 2024-03-28. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the schedStartTime parameter of the setSchedWifi function.
• CVE-2024-30601, published 2024-03-28. High severity, CVSS 8.0. EPSS: 0.7% chance of exploitation in the next 30 days. Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the time parameter of the saveParentControlInfo function.
• CVE-2024-30600, published 2024-03-28. High severity, CVSS 8.0. EPSS: 0.7% chance of exploitation in the next 30 days. Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the schedEndTime parameter of the setSchedWifi function.