A vulnerability, which was classified as critical, has been found in Tenda FH1202 1.2.0.14(408). Affected by this issue is some unknown functionality of the file /default.cfg. The manipulation of the argument these leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
References
| Link | Resource |
|---|---|
| https://lavender-bicycle-a5a.notion.site/Tenda-FH1202-default-cfg-1bc53a41781f806d8016cd4e73ca4d6f?pvs=4 | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.302042 | Permissions Required VDB Entry |
| https://vuldb.com/?id.302042 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.523416 | Third Party Advisory VDB Entry |
| https://www.tenda.com.cn/ | Product |
Configurations
Configuration 1 (hide)
| AND |
|
History
08 Apr 2025, 14:00
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Tenda
Tenda fh1202 Tenda fh1202 Firmware |
|
| CPE | cpe:2.3:h:tenda:fh1202:-:*:*:*:*:*:*:* cpe:2.3:o:tenda:fh1202_firmware:1.2.0.14\(408\):*:*:*:*:*:*:* |
|
| CWE | NVD-CWE-noinfo | |
| References | () https://www.tenda.com.cn/ - Product | |
| References | () https://vuldb.com/?submit.523416 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?ctiid.302042 - Permissions Required, VDB Entry | |
| References | () https://lavender-bicycle-a5a.notion.site/Tenda-FH1202-default-cfg-1bc53a41781f806d8016cd4e73ca4d6f?pvs=4 - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?id.302042 - Third Party Advisory, VDB Entry |
31 Mar 2025, 12:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-03-31 12:15
Updated : 2025-04-08 14:00
NVD link : CVE-2025-2993
Mitre link : CVE-2025-2993
JSON object : View
Products Affected
tenda
- fh1202_firmware
- fh1202
CWE