Details of VAR-202604-2993

ID

VAR-202604-2993

CVE

CVE-2026-7034

TITLE

Shenzhen Tenda Technology Co.,Ltd. of FH1202 Multiple vulnerabilities in firmware

Trust: 0.8

sources: JVNDB: JVNDB-2026-013761

DESCRIPTION

A vulnerability was found in Tenda FH1202 1.2.0.14(408). Affected by this issue is the function WrlExtraSet of the file /goform/WrlExtraSet of the component httpd. Performing a manipulation of the argument Go results in stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made public and could be used. The exploit is publicly available and could be exploited.All information handled by the software may be leaked to the outside. All information handled by the software may be rewritten. Furthermore, the software may stop working completely. Furthermore, attacks that exploit this vulnerability will not affect other software

Trust: 1.62

sources: NVD: CVE-2026-7034 // JVNDB: JVNDB-2026-013761

AFFECTED PRODUCTS

vendor:	tenda	model:	fh1202	scope:	eq	version:	1.2.0.14\(408\)	Trust: 1.0
vendor:	tenda	model:	fh1202	scope:	-	version:	-	Trust: 0.8
vendor:	tenda	model:	fh1202	scope:	eq	version:	-	Trust: 0.8
vendor:	tenda	model:	fh1202	scope:	eq	version:	fh1202 firmware 1.2.0.14¥(408¥)	Trust: 0.8

sources: JVNDB: JVNDB-2026-013761 // NVD: CVE-2026-7034

CVSS

SEVERITY

CVSSV2

CVSSV3

cna@vuldb.com:	CVE-2026-7034
value:	HIGH
Trust: 1.0
OTHER:	JVNDB-2026-013761
value:	HIGH
Trust: 0.8

cna@vuldb.com:	CVE-2026-7034
severity:	HIGH
baseScore:	9.0
vectorString:	AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	8.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.0
OTHER:	JVNDB-2026-013761
severity:	HIGH
baseScore:	9.0
vectorString:	AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	NONE
impactScore:	NONE
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.8

cna@vuldb.com:	CVE-2026-7034
baseSeverity:	HIGH
baseScore:	8.8
vectorString:	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	2.8
impactScore:	5.9
version:	3.1
Trust: 1.0
OTHER:	JVNDB-2026-013761
baseSeverity:	HIGH
baseScore:	8.8
vectorString:	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: JVNDB: JVNDB-2026-013761 // NVD: CVE-2026-7034

PROBLEMTYPE DATA

problemtype:	CWE-119	Trust: 1.0
problemtype:	CWE-121	Trust: 1.0
problemtype:	Buffer error (CWE-119) [ others ]	Trust: 0.8
problemtype:	Stack-based buffer overflow (CWE-121) [ others ]	Trust: 0.8

sources: JVNDB: JVNDB-2026-013761 // NVD: CVE-2026-7034

PATCH

title:

//vuldb.com/vuln/359614

url:

https://github.com/Litengzheng/vuldb_new/blob/main/FH1202/vul_19/README.md

Trust: 0.8

sources: JVNDB: JVNDB-2026-013761

EXTERNAL IDS

db:	NVD	id:	CVE-2026-7034	Trust: 2.6
db:	JVNDB	id:	JVNDB-2026-013761	Trust: 0.8

sources: JVNDB: JVNDB-2026-013761 // NVD: CVE-2026-7034

REFERENCES

url:	https://www.tenda.com.cn/	Trust: 1.8
url:	https://vuldb.com/vuln/359614	Trust: 1.0
url:	https://vuldb.com/submit/798476	Trust: 1.0
url:	https://vuldb.com/vuln/359614/cti	Trust: 1.0
url:	https://github.com/litengzheng/vuldb_new/blob/main/fh1202/vul_19/readme.md	Trust: 1.0
url:	https://nvd.nist.gov/vuln/detail/cve-2026-7034	Trust: 0.8

sources: JVNDB: JVNDB-2026-013761 // NVD: CVE-2026-7034

SOURCES

db:	JVNDB	id:	JVNDB-2026-013761
db:	NVD	id:	CVE-2026-7034

LAST UPDATE DATE

2026-06-19T23:34:46.670000+00:00

SOURCES UPDATE DATE

db:	JVNDB	id:	JVNDB-2026-013761	date:	2026-05-01T01:41:00
db:	NVD	id:	CVE-2026-7034	date:	2026-04-30T14:10:42.487

SOURCES RELEASE DATE

db:	JVNDB	id:	JVNDB-2026-013761	date:	2026-05-01T00:00:00
db:	NVD	id:	CVE-2026-7034	date:	2026-04-26T12:16:21.570