A vulnerability classified as critical was found in Tenda FH1201 1.2.0.14. Affected by this vulnerability is the function fromRouteStatic of the file /goform/fromRouteStatic of the component HTTP POST Request Handler. The manipulation of the argument page leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS
No CVSS.
References
Link | Resource |
---|---|
https://candle-throne-f75.notion.site/Tenda-FH1201-fromRouteStatic-229df0aa118580ba952bd3f16857b176 | Exploit Third Party Advisory |
https://candle-throne-f75.notion.site/Tenda-FH1201-fromRouteStatic-229df0aa118580ba952bd3f16857b176 | Exploit Third Party Advisory |
https://vuldb.com/?ctiid.316117 | Permissions Required |
https://vuldb.com/?id.316117 | Third Party Advisory VDB Entry |
https://vuldb.com/?submit.610389 | Third Party Advisory VDB Entry |
https://www.tenda.com.cn/ | Product |
Configurations
Configuration 1 (hide)
AND |
|
History
15 Jul 2025, 18:09
Type | Values Removed | Values Added |
---|---|---|
First Time |
Tenda
Tenda fh1201 Tenda fh1201 Firmware |
|
CPE | cpe:2.3:o:tenda:fh1201_firmware:1.2.0.14:*:*:*:*:*:*:* cpe:2.3:h:tenda:fh1201:-:*:*:*:*:*:*:* |
|
References | () https://www.tenda.com.cn/ - Product | |
References | () https://vuldb.com/?submit.610389 - Third Party Advisory, VDB Entry | |
References | () https://candle-throne-f75.notion.site/Tenda-FH1201-fromRouteStatic-229df0aa118580ba952bd3f16857b176 - Exploit, Third Party Advisory | |
References | () https://vuldb.com/?id.316117 - Third Party Advisory, VDB Entry | |
References | () https://vuldb.com/?ctiid.316117 - Permissions Required |
14 Jul 2025, 21:15
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-119 |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : unknown |
12 Jul 2025, 07:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2025-07-12 07:15
Updated : 2025-07-15 18:09
NVD link : CVE-2025-7465
Mitre link : CVE-2025-7465
JSON object : View
Products Affected
tenda
- fh1201_firmware
- fh1201
CWE
No CWE.