CVE-2023-37716

CriticalCVSS 9.8

Published: 14/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.78%

51th percentile - higher than 51% of all known CVEs

Summary

A stack overflow was discovered in the page parameter in the function fromNatStaticSetting in Tenda F1202, FH1202, AC10, AC1206, AC7, AC5, and AC9 devices.

Risk Assessment

Stack overflow may lead to remote code execution, posing a serious security threat to the devices and network.

Recommendation

It is recommended to update the device firmware to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromNatStaticSetting.