← Database

CVE-2024-42978

CRITICAL CVSS: 9.8 Published: 2024-08-15 Modified: 2026-06-17

Description

An issue in the handler function in /goform/telnet of Tenda FH1206 v02.03.01.35 allows attackers to execute arbitrary commands via a crafted HTTP request.

Affected Platforms

Tenda Fh1206 FirmwareTenda Fh1206

Weakness Type

NVD-CWE-noinfo, CWE-78

References