CVE-2024-32282

MEDIUM

Tenda FH1202 v1.2.0.14 - Command Injection

Title source: llm

Tenda FH1202 v1.2.0.14(408) firmware contains a command injection vulnerablility in the formexeCommand function via the cmdinput parameter.

Core 1

Core References

Broken Link

CVSS v3 6.3

EPSS 0.0045

EPSS Percentile 63.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Vulnrichment

Exploitation poc

Automatable no

Technical Impact total

CWE

CWE-77

Status published

Products (1)

tenda/fh1202_firmware 1.2.0.14\(408\)

Published Apr 17, 2024

Tracked Since Feb 18, 2026