CVE-2023-24126
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk51th percentile - higher than 51% of all known CVEs
Summary
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en. The issue is triggered via the wepkey4_5g parameter in the /goform/WifiBasicSet script.
Risk Assessment
An attacker can remotely exploit this vulnerability to execute arbitrary code or cause a denial of service (DoS), potentially leading to device takeover or disruption of services.
Recommendation
Immediately update the device firmware to the latest available version if a patch has been released. If no update is available, restrict management interface access to trusted networks only.
Other vulnerabilities in Jensen of Scandinavia Eagle 1200AC
See all- CVE-2023-24135High
A command injection vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware V15.03.06.33_en, specifically in the formWriteFacMac function. Attackers can execute arbitrary commands by manipulating the mac parameter.
- CVE-2023-24127Medium
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en via the wepkey1 parameter in the /goform/WifiBasicSet script.
- CVE-2023-24125Medium
A stack overflow vulnerability was discovered in Jensen of Scandinavia Eagle 1200AC firmware version V15.03.06.33_en. The issue is triggered via the wepkey2_5g parameter in the /goform/WifiBasicSet script.
- CVE-2023-24124Medium
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en. The issue is triggered via the wrlEn parameter in the /goform/WifiBasicSet script.
- CVE-2023-24123Medium
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en via the wepauth parameter at /goform/WifiBasicSet.
- CVE-2023-24122Medium
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en via the ssid_5g parameter at /goform/WifiBasicSet.
- CVE-2023-24121Medium
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router with firmware version V15.03.06.33_en via the security_5g parameter at /goform/WifiBasicSet.
- CVE-2023-24120Medium
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC device running firmware version V15.03.06.33_en via the wrlEn_5g parameter at /goform/WifiBasicSet.
- CVE-2023-24119Medium
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router firmware version V15.03.06.33_en via the ssid parameter at /goform/WifiBasicSet. This flaw could allow an attacker to execute arbitrary code or cause a denial of service.
- CVE-2023-24118Medium
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware V15.03.06.33_en, triggered via the security parameter in a request to /goform/WifiBasicSet.
Original NVD description (English source)
Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey4_5g parameter at /goform/WifiBasicSet.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS