CVE-2025-6113: high-severity vulnerability in Tenda FH1203
Tenda FH1203 AdvSetLanip fromadvsetlanip buffer overflow
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.7epss 1.3%
A vulnerability, which was classified as critical, was found in Tenda FH1203 2.0.1.6. Affected is the function fromadvsetlanip of the file /goform/AdvSetLanip. The manipulation of the argument lanMask leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Affected products
Tenda · FH1203Related CVEs — Tenda FH1203
In the same product, most dangerous first.
CVE-2024-2991MEDIUMTenda FH1203 WriteFacMac formWriteFacMac command injectionEPSS 7.6%CVE-2024-2992HIGHTenda FH1203 setcfm formSetCfm stack-based overflowEPSS 1.7%CVE-2024-2993HIGHTenda FH1203 QuickIndex formQuickIndex stack-based overflowEPSS 1.6%CVE-2024-2989HIGHTenda FH1203 NatStaticSetting fromNatStaticSetting stack-based overflowEPSS 1.6%CVE-2024-2988HIGHTenda FH1203 fromRouteStatic fromSetRouteStatic stack-based overflowEPSS 1.6%CVE-2024-2994HIGHTenda FH1203 GetParentControlInfo stack-based overflowEPSS 1.5%