Vulnerability Database

308,820

Total vulnerabilities in the database

CVE-2024-12002

A vulnerability classified as problematic was found in Tenda FH451, FH1201, FH1202 and FH1206 up to 20241129. Affected by this vulnerability is the function websReadEvent of the file /goform/GetIPTV. The manipulation of the argument Content-Length leads to null pointer dereference. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

  • Published: Nov 30, 2024
  • Updated: Nov 16, 2025
  • CVE: CVE-2024-12002
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CVSS v2:

  • Severity: Low
  • Score: 4
  • AV:N/AC:L/Au:S/C:N/I:N/A:P

CWEs:

Software From Fixed in
tenda / fh451_firmware 1.0.0.5 1.0.0.5.x
tenda / fh451_firmware 1.0.0.7 1.0.0.7.x
tenda / fh451_firmware 1.0.0.9 1.0.0.9.x
tenda / fh1201_firmware 1.2.0.8(8155) 1.2.0.8(8155).x
tenda / fh1201_firmware 1.2.0.14(408)_en 1.2.0.14(408)_en.x
tenda / fh1202_firmware 1.2.0.9 1.2.0.9.x
tenda / fh1202_firmware 1.2.0.14(408) 1.2.0.14(408).x
tenda / fh1202_firmware 1.2.0.14(408)_en 1.2.0.14(408)_en.x
tenda / fh1206_firmware 1.2.0.8(8155) 1.2.0.8(8155).x