PT-2025-13693 · Tenda · Tenda Fh1202
Yhryhryhr_Mie
·
Published
2025-03-20
·
Updated
2025-03-31
·
CVE-2025-2993
CVSS v4.0
6.9
Medium
| Vector | AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Name of the Vulnerable Software and Affected Versions
Tenda FH1202 version 1.2.0.14(408)
Description
A critical issue has been found, affecting some unknown functionality of the file /default.cfg. The manipulation of the
these argument leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.Recommendations
For Tenda FH1202 version 1.2.0.14(408), as a temporary workaround, consider restricting access to the file /default.cfg to minimize the risk of exploitation. Avoid using the
these argument in affected configurations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Improper Access Control
Incorrect Privilege Assignment
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Tenda Fh1202