Total vulnerabilities in the database
A vulnerability classified as problematic was found in Tenda FH451, FH1201, FH1202 and FH1206 up to 20241129. Affected by this vulnerability is the function websReadEvent of the file /goform/GetIPTV. The manipulation of the argument Content-Length leads to null pointer dereference. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
| Software | From | Fixed in |
|---|---|---|
| tenda / fh451_firmware | 1.0.0.5 | 1.0.0.5.x |
| tenda / fh451_firmware | 1.0.0.7 | 1.0.0.7.x |
| tenda / fh451_firmware | 1.0.0.9 | 1.0.0.9.x |
| tenda / fh1201_firmware | 1.2.0.8(8155) | 1.2.0.8(8155).x |
| tenda / fh1201_firmware | 1.2.0.14(408)_en | 1.2.0.14(408)_en.x |
| tenda / fh1202_firmware | 1.2.0.9 | 1.2.0.9.x |
| tenda / fh1202_firmware | 1.2.0.14(408) | 1.2.0.14(408).x |
| tenda / fh1202_firmware | 1.2.0.14(408)_en | 1.2.0.14(408)_en.x |
| tenda / fh1206_firmware | 1.2.0.8(8155) | 1.2.0.8(8155).x |