CVE-2023-24130
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk51th percentile - higher than 51% of all known CVEs
Summary
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en, specifically in the wepkey parameter at the /goform/WifiBasicSet endpoint. This flaw could allow an attacker to execute arbitrary code or cause a denial of service.
Risk Assessment
An attacker could remotely exploit this vulnerability to gain full control of the router, compromising the confidentiality and integrity of the local network and potentially using the device as a pivot for further attacks.
Recommendation
Update the router firmware to the latest version provided by the manufacturer immediately. If no update is available, restrict management interface access to trusted networks only.
Other vulnerabilities in Jensen of Scandinavia Eagle 1200AC
See all- CVE-2023-24135High
A command injection vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware V15.03.06.33_en, specifically in the formWriteFacMac function. Attackers can execute arbitrary commands by manipulating the mac parameter.
- CVE-2023-24127Medium
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en via the wepkey1 parameter in the /goform/WifiBasicSet script.
- CVE-2023-24126Medium
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en. The issue is triggered via the wepkey4_5g parameter in the /goform/WifiBasicSet script.
- CVE-2023-24125Medium
A stack overflow vulnerability was discovered in Jensen of Scandinavia Eagle 1200AC firmware version V15.03.06.33_en. The issue is triggered via the wepkey2_5g parameter in the /goform/WifiBasicSet script.
- CVE-2023-24124Medium
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en. The issue is triggered via the wrlEn parameter in the /goform/WifiBasicSet script.
- CVE-2023-24123Medium
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en via the wepauth parameter at /goform/WifiBasicSet.
- CVE-2023-24122Medium
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en via the ssid_5g parameter at /goform/WifiBasicSet.
- CVE-2023-24121Medium
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router with firmware version V15.03.06.33_en via the security_5g parameter at /goform/WifiBasicSet.
- CVE-2023-24120Medium
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC device running firmware version V15.03.06.33_en via the wrlEn_5g parameter at /goform/WifiBasicSet.
- CVE-2023-24119Medium
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router firmware version V15.03.06.33_en via the ssid parameter at /goform/WifiBasicSet. This flaw could allow an attacker to execute arbitrary code or cause a denial of service.
Original NVD description (English source)
Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey parameter at /goform/WifiBasicSet.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS