CVE Catalog

CVE-2023-38932

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.80%

52th percentile - higher than 52% of all known CVEs

Summary

Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5, and FH1202 V1.2.0.9 were found to have a stack overflow vulnerability via the page parameter in the SafeEmailFilter function.

Risk Assessment

An attacker could exploit this vulnerability to execute malicious code, potentially leading to device takeover.

Recommendation

It is recommended to update the device firmware to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the page parameter in the SafeEmailFilter function.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS