CVE-2023-24117
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk51th percentile - higher than 51% of all known CVEs
Summary
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en, specifically in the wepauth_5g parameter at /goform/WifiBasicSet. This flaw could allow an attacker to execute arbitrary code or cause a denial of service.
Risk Assessment
The risk involves potential remote code execution or device crash, compromising network security and data integrity.
Recommendation
Immediately update the device firmware to the latest version that patches this vulnerability. If no update is available, restrict administrative access to trusted networks only.
Other vulnerabilities in Jensen of Scandinavia Eagle 1200AC
See all- CVE-2023-24135High
A command injection vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware V15.03.06.33_en, specifically in the formWriteFacMac function. Attackers can execute arbitrary commands by manipulating the mac parameter.
- CVE-2023-24127Medium
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en via the wepkey1 parameter in the /goform/WifiBasicSet script.
- CVE-2023-24126Medium
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en. The issue is triggered via the wepkey4_5g parameter in the /goform/WifiBasicSet script.
- CVE-2023-24125Medium
A stack overflow vulnerability was discovered in Jensen of Scandinavia Eagle 1200AC firmware version V15.03.06.33_en. The issue is triggered via the wepkey2_5g parameter in the /goform/WifiBasicSet script.
- CVE-2023-24124Medium
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en. The issue is triggered via the wrlEn parameter in the /goform/WifiBasicSet script.
- CVE-2023-24123Medium
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en via the wepauth parameter at /goform/WifiBasicSet.
- CVE-2023-24122Medium
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en via the ssid_5g parameter at /goform/WifiBasicSet.
- CVE-2023-24121Medium
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router with firmware version V15.03.06.33_en via the security_5g parameter at /goform/WifiBasicSet.
- CVE-2023-24120Medium
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC device running firmware version V15.03.06.33_en via the wrlEn_5g parameter at /goform/WifiBasicSet.
- CVE-2023-24119Medium
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router firmware version V15.03.06.33_en via the ssid parameter at /goform/WifiBasicSet. This flaw could allow an attacker to execute arbitrary code or cause a denial of service.
Original NVD description (English source)
Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepauth_5g parameter at /goform/WifiBasicSet.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS