CVE-2025-2989: Tenda FH1202 Web Management Interface AdvSetWrl access control
A vulnerability was found in Tenda FH1202 1.2.0.14(408). It has been declared as critical. This vulnerability affects unknown code of the file /goform/AdvSetWrl of the component Web Management Interface. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2989?
The severity of CVE-2025-2989 has been declared as critical.
How do I fix CVE-2025-2989?
To fix CVE-2025-2989, update the Tenda FH1202 firmware to the latest version released by the vendor.
What component is affected by CVE-2025-2989?
CVE-2025-2989 affects the Web Management Interface of the Tenda FH1202 router.
What type of vulnerability is CVE-2025-2989?
CVE-2025-2989 is an improper access control vulnerability.
Can CVE-2025-2989 be exploited remotely?
Yes, CVE-2025-2989 can be exploited remotely if the attack is initiated through the affected interface.