CVE Catalog

CVE-2023-24130

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.77%

51th percentile - higher than 51% of all known CVEs

Summary

A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en, specifically in the wepkey parameter at the /goform/WifiBasicSet endpoint. This flaw could allow an attacker to execute arbitrary code or cause a denial of service.

Risk Assessment

An attacker could remotely exploit this vulnerability to gain full control of the router, compromising the confidentiality and integrity of the local network and potentially using the device as a pivot for further attacks.

Recommendation

Update the router firmware to the latest version provided by the manufacturer immediately. If no update is available, restrict management interface access to trusted networks only.

Original NVD description (English source)

Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey parameter at /goform/WifiBasicSet.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS