CVE-2023-37702
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk56th percentile - higher than 56% of all known CVEs
Summary
Version V2.0.1.6 of the Tenda FH1203 contains a stack overflow vulnerability in the formSetDeviceName function via the deviceId parameter.
Risk Assessment
An attacker could exploit this vulnerability to execute malicious code, potentially leading to device takeover.
Recommendation
It is recommended to update the device firmware to the latest version to mitigate this vulnerability.
Other vulnerabilities in Tenda FH1203 V2.0.1.6
See all- CVE-2023-37707Critical
Version V2.0.1.6 of the Tenda FH1203 contains a stack overflow vulnerability in the fromVirtualSer function via the page parameter.
- CVE-2023-37706Critical
Version V2.0.1.6 of the Tenda FH1203 contains a stack overflow vulnerability in the fromAddressNat function, caused by the entrys parameter.
- CVE-2023-37705Critical
Version V2.0.1.6 of the Tenda FH1203 contains a stack overflow vulnerability in the fromAddressNat function via the page parameter.
- CVE-2023-37704Critical
Version V2.0.1.6 of the Tenda FH1203 contains a stack overflow vulnerability via the deviceId parameter in the formSetClientState function.
- CVE-2023-37703Critical
Version V2.0.1.6 of the Tenda FH1203 contains a stack overflow vulnerability via the speed_dir parameter in the formSetSpeedWan function.
- CVE-2023-37701Critical
The Tenda FH1203 V2.0.1.6 device was found to contain a stack overflow vulnerability in the addWifiMacFilter function related to the deviceId parameter.
- CVE-2023-37700Critical
Version V2.0.1.6 of the Tenda FH1203 has a stack overflow vulnerability via the ssid parameter in the form_fast_setting_wifi_set function.
Original NVD description (English source)
Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the deviceId parameter in the formSetDeviceName function.