CVE-2025-14994highCWE-119CWE-121

CVE-2025-14994: falha de alta gravidade em Tenda FH1201

Tenda FH1201/FH1206 HTTP Request webtypelibrary strcat stack-based overflow

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar FH1201+ Monitorar FH1206

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.7epss 0.7%
A flaw has been found in Tenda FH1201 and FH1206 1.2.0.14(408)/1.2.0.8(8155). This impacts the function strcat of the file /goform/webtypelibrary of the component HTTP Request Handler. This manipulation of the argument webSiteId causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Produtos afetados
Tenda · FH1201Tenda · FH1206
CVEs relacionadas — Tenda FH1201

No mesmo produto, das mais perigosas para as menos.

CVE-2025-6110HIGHTenda FH1201 SafeMacFilter stack-based overflowEPSS 5.6%CVE-2024-4020HIGHTenda FH1206 addressNat fromAddressNat buffer overflowEPSS 1.6%CVE-2024-7615HIGHTenda FH1206 fromSafeUrlFilter stack-based overflowEPSS 1.5%CVE-2024-7614HIGHTenda FH1206 qossetting fromqossetting stack-based overflowEPSS 1.5%CVE-2024-7613HIGHTenda FH1206 GstDhcpSetSer fromGstDhcpSetSer buffer overflowEPSS 1.5%CVE-2024-7707HIGHTenda FH1206 HTTP POST Request SafeEmailFilter formSafeEmailFilter stack-based overflowEPSS 1.3%