CVE-2025-2993: Tenda FH1202 default.cfg access control
Published Mar 31, 2025
·Updated
A vulnerability, which was classified as critical, has been found in Tenda FH1202 1.2.0.14(408). Affected by this issue is some unknown functionality of the file /default.cfg. The manipulation of the argument these leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
3 affected components
Tenda FH1202
All of the following
Tenda Fh1202 Firmware=1.2.0.14\(408\)
Tenda FH1202
Event History
Mar 31, 2025
CVE Published
via MITRE·11:31 AM
Data Sourced
via MITRE·11:31 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeakness
May 11, 57220
Event
via FIRST·06:50 AM
Frequently Asked Questions
1
What is the severity of CVE-2025-2993?
CVE-2025-2993 is classified as a critical vulnerability.
2
How do I fix CVE-2025-2993?
To mitigate CVE-2025-2993, update the Tenda FH1202 firmware to the latest version as recommended by the vendor.
3
What is affected by CVE-2025-2993?
CVE-2025-2993 affects the Tenda FH1202 router, specifically the functionality associated with the /default.cfg file.
4
What type of vulnerability is CVE-2025-2993?
CVE-2025-2993 is an improper access control vulnerability.
5
Can CVE-2025-2993 be exploited remotely?
Yes, CVE-2025-2993 may be exploited remotely by attackers.