CVE-2025-14994
A flaw has been found in Tenda FH1201 and FH1206 1.2.0.14(408)/1.2.0.8(8155).
Published Dec 21, 2025 · updated Oct 14, 2026 · tenda fh1201 firmware
A flaw has been found in Tenda FH1201 and FH1206 1.2.0.14(408)/1.2.0.8(8155). This impacts the function strcat of the file /goform/webtypelibrary of the component HTTP Request Handler. This manipulation of the argument webSiteId causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may be used.
Timeline
Detection, updates, and resolution for this record.
Dec 21, 2025 · NIST NVD
Detected
A flaw has been found in Tenda FH1201 and FH1206 1.2.0.14(408)/1.2.0.8(8155). This impacts the function strcat of the file /goform/webtypelibrary of the component HTTP Request Handler. This manipulation of the argument webSiteId causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may be used.
Oct 14, 2026 · NIST NVD
Updated
A flaw has been found in Tenda FH1201 and FH1206 1.2.0.14(408)/1.2.0.8(8155). This impacts the function strcat of the file /goform/webtypelibrary of the component HTTP Request Handler. This manipulation of the argument webSiteId causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may be used.
Affected
- cpe tenda/fh1201 firmware1.2.0.14\(408\)
- cpe tenda/fh1206 firmware1.2.0.8\(8155\)
Sources
- CVE.orgCVE-2025-14994
Official CVE identifier
cve.org - FIRST EPSSCVE-2025-14994
30-day exploitation probability 0.7%
first.org - NIST NVDCVE-2025-14994
A flaw has been found in Tenda FH1201 and FH1206 1.2.0.14(408)/1.2.0.8(8155). This impacts the function strcat of the file /goform/webtypelibrary of the component HTTP Request Handler. This manipulation of the argument webSiteId causes stack-based buffer overflow. The attack is p
nvd.nist.gov