CVE-2023-37705
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk56th percentile - higher than 56% of all known CVEs
Summary
Version V2.0.1.6 of the Tenda FH1203 contains a stack overflow vulnerability in the fromAddressNat function via the page parameter.
Risk Assessment
Exploitation of this vulnerability could lead to remote code execution, posing a serious security threat to the device and the network it is installed in.
Recommendation
It is recommended to update the device firmware to the latest version to mitigate this vulnerability.
Other vulnerabilities in Tenda FH1203 V2.0.1.6
See all- CVE-2023-37707Critical
Version V2.0.1.6 of the Tenda FH1203 contains a stack overflow vulnerability in the fromVirtualSer function via the page parameter.
- CVE-2023-37706Critical
Version V2.0.1.6 of the Tenda FH1203 contains a stack overflow vulnerability in the fromAddressNat function, caused by the entrys parameter.
- CVE-2023-37704Critical
Version V2.0.1.6 of the Tenda FH1203 contains a stack overflow vulnerability via the deviceId parameter in the formSetClientState function.
- CVE-2023-37703Critical
Version V2.0.1.6 of the Tenda FH1203 contains a stack overflow vulnerability via the speed_dir parameter in the formSetSpeedWan function.
- CVE-2023-37702Critical
Version V2.0.1.6 of the Tenda FH1203 contains a stack overflow vulnerability in the formSetDeviceName function via the deviceId parameter.
- CVE-2023-37701Critical
The Tenda FH1203 V2.0.1.6 device was found to contain a stack overflow vulnerability in the addWifiMacFilter function related to the deviceId parameter.
- CVE-2023-37700Critical
Version V2.0.1.6 of the Tenda FH1203 has a stack overflow vulnerability via the ssid parameter in the form_fast_setting_wifi_set function.
Original NVD description (English source)
Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the page parameter in the fromAddressNat function.