PT-2024-26262 · Tenda · Tenda Fh1206

Name of the Vulnerable Software and Affected Versions: Tenda FH1206 version 1.2.0.88155 EN Description: A stack-based buffer overflow issue was found via the PPW parameter at the "ip/goform/WizardHandle" API endpoint. Recommendations: For Tenda FH1206 version 1.2.0.88155 EN, avoid using the PPW...

Tenda AX12: Operating System Command Injection Vulnerability

Tenda AX12 is a dual-band Gigabit Wifi 6 wireless router from Tenda, China. An operating system command injection vulnerability exists in Tenda AX12 version V22.03.01.21CN, which originates from a command injection vulnerability via the /goform/setMacFilterCfg function...