CVE-2023-24133
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk51th percentile - higher than 51% of all known CVEs
Summary
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en, specifically in the wepkey_5g parameter of the /goform/WifiBasicSet script. This flaw could allow an attacker to execute arbitrary code or cause a denial of service.
Risk Assessment
The risk to the organization includes potential remote code execution or device crash, leading to network compromise and data exposure.
Recommendation
It is recommended to update the device firmware to the latest version if a patch is available. If not, restrict administrative access to trusted networks only.
Other vulnerabilities in Jensen of Scandinavia Eagle 1200AC
See all- CVE-2023-24135High
A command injection vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware V15.03.06.33_en, specifically in the formWriteFacMac function. Attackers can execute arbitrary commands by manipulating the mac parameter.
- CVE-2023-24127Medium
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en via the wepkey1 parameter in the /goform/WifiBasicSet script.
- CVE-2023-24126Medium
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en. The issue is triggered via the wepkey4_5g parameter in the /goform/WifiBasicSet script.
- CVE-2023-24125Medium
A stack overflow vulnerability was discovered in Jensen of Scandinavia Eagle 1200AC firmware version V15.03.06.33_en. The issue is triggered via the wepkey2_5g parameter in the /goform/WifiBasicSet script.
- CVE-2023-24124Medium
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en. The issue is triggered via the wrlEn parameter in the /goform/WifiBasicSet script.
- CVE-2023-24123Medium
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en via the wepauth parameter at /goform/WifiBasicSet.
- CVE-2023-24122Medium
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en via the ssid_5g parameter at /goform/WifiBasicSet.
- CVE-2023-24121Medium
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router with firmware version V15.03.06.33_en via the security_5g parameter at /goform/WifiBasicSet.
- CVE-2023-24120Medium
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC device running firmware version V15.03.06.33_en via the wrlEn_5g parameter at /goform/WifiBasicSet.
- CVE-2023-24119Medium
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router firmware version V15.03.06.33_en via the ssid parameter at /goform/WifiBasicSet. This flaw could allow an attacker to execute arbitrary code or cause a denial of service.
Original NVD description (English source)
Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey_5g parameter at /goform/WifiBasicSet.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS