CVE-2023-37722
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk51th percentile - higher than 51% of all known CVEs
Summary
A stack overflow was discovered in the page parameter in the function fromSafeUrlFilter in Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN devices.
Risk Assessment
Stack overflow may lead to remote code execution, posing a serious security threat to the devices and the network they are installed in.
Recommendation
It is recommended to update the device firmware to the latest version to mitigate this vulnerability.
Other vulnerabilities in Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN
See all- CVE-2023-37723Critical
A stack overflow was discovered in the page parameter in the function fromqossetting in Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN devices.
- CVE-2023-37721Critical
A stack overflow was discovered in the page parameter in the function fromSafeMacFilter in Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN devices.
- CVE-2023-37719Critical
A stack overflow was discovered in the page parameter in the function fromP2pListFilter in Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN devices.
- CVE-2023-37718Critical
A stack overflow was discovered in the page parameter in the function fromSafeClientFilter in Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN devices.
- CVE-2023-37715Critical
A stack overflow was discovered in the page parameter in the function frmL7ProtForm in Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN devices.
- CVE-2023-37714Critical
A stack overflow was discovered in the page parameter in the function fromRouteStatic in Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN devices.
Original NVD description (English source)
Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromSafeUrlFilter.