CVE Catalog
CVE-2023-37711
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk0.94%
56th percentile - higher than 56% of all known CVEs
Summary
A stack overflow was discovered in the deviceId parameter in the saveParentControlInfo function in Tenda AC1206 V15.03.06.23 and AC10 V15.03.06.47.
Risk Assessment
Stack overflow may lead to remote code execution, posing a serious security threat to the devices and network.
Recommendation
It is recommended to update the device firmware to the latest version to mitigate this vulnerability.
Original NVD description (English source)
Tenda AC1206 V15.03.06.23 and AC10 V15.03.06.47 were discovered to contain a stack overflow in the deviceId parameter in the saveParentControlInfo function.