CVE-2024-35339 — Tenda FH1206 V1.2.0.8(8155) was discovered to contain a command injection vulnerability via the mac parameter at ip/goform/WriteFacMac

CRITICAL

Tenda FH1206 V1.2.0.8(8155) was discovered to contain a command injection vulnerability via the mac parameter at ip/goform/WriteFacMac

Published May 24, 2024

9.8

CRITICAL

CVSS 3.1

EPSS 1.84%

Tenda FH1206 V1.2.0.8(8155) was discovered to contain a command injection vulnerability via the mac parameter at ip/goform/WriteFacMac.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
0	affected	-

No remediation recorded yet.

1.84% 0.01840

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 2, 2026.

EPSS probability 0.01840

2025–2026

Table of values (11 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 2, 2026	1.84% (0.01840)	78.24th	v5 (v2026.06.15)
Jun 15, 2026	1.84% (0.01840)	76.14th	v5 (v2026.06.15)
Nov 21, 2025	4.39% (0.04390)	88.49th	v4 (v2025.03.14)
Nov 18, 2025	15.25% (0.15248)	94.02th	v4 (v2025.03.14)
Oct 13, 2025	4.39% (0.04390)	88.43th	v4 (v2025.03.14)
Jul 2, 2025	2.54% (0.02535)	84.86th	v4 (v2025.03.14)
Apr 10, 2025	14.35% (0.14346)	93.84th	v4 (v2025.03.14)
Mar 30, 2025	2.74% (0.02742)	84.70th	v4 (v2025.03.14)
Mar 29, 2025	7.47% (0.07470)	85.98th	v4 (v2025.03.14)
Mar 17, 2025	2.99% (0.02993)	85.65th	v4 (v2025.03.14)
Feb 14, 2025	0.04% (0.00043)	11.64th	v3 (v2023.03.01)