CVE-2024-41473
CRITICALTendacn Fh1201 Firmware - OS Command Injection
Title source: ruleDescription
Tenda FH1201 v1.2.0.14 was discovered to contain a command injection vulnerability via the mac parameter at ip/goform/WriteFacMac
Scores
CVSS v3
9.8
EPSS
0.8798
EPSS Percentile
99.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-78
Status
published
Affected Products (1)
tendacn/fh1201_firmware
Timeline
Published
Jul 25, 2024
Tracked Since
Feb 18, 2026