CVE-2023-37701

Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the deviceId parameter in the addWifiMacFilter function

published July 10, 2023

CVSS
—
EPSS
1%
Percentile
65.7
In the wild
Unconfirmed
What it is

⚠️ A sneaky stack overflow is hiding in the Tenda FH1203! It happens via the deviceId parameter when adding WiFi MAC filters — that’s one unpredictable invitation to a party no one asked for! Think of it like a restaurant that overbooks for a holiday feast without checking how many seats they really have. When too many guests show up, things spill over, and chaos ensues! An attacker could potentially exploit this vulnerability to crash the device, causing disruptions in your network — imagine your cooking for the big feast turning into an unexpected kitchen disaster! While no data breach is confirmed here, the reliability of your internet connection is at stake, and that can lead to some very frustrated users.

Put simply

Think of it like a restaurant that overbooks for a holiday feast without checking how many seats they really have. When too many guests show up, things spill over, and chaos ensues! The vulnerability arises from a stack overflow in the addWifiMacFilter function when an attacker manipulates the deviceId parameter. This means that overflowing data can cause the system to behave unpredictably, leading to crashes or unexpected behavior.

What to do

An attacker could potentially exploit this vulnerability to crash the device, causing disruptions in your network — imagine your cooking for the big feast turning into an unexpected kitchen disaster! While no data breach is confirmed here, the reliability of your internet connection is at stake, and that can lead to some very frustrated users. To resolve this issue, upgrade your Tenda FH1203 to the latest firmware version if available. Regularly check for updates to ensure you're protected against potential exploits and monitor your device settings. You've got this! By staying proactive and updating, you're not just a user; you're a security champion! 🦸‍♂️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01112 · 65.7th percentile
Published
2023-07-10T00:00Z
EPSS history
Timeline
  • 10 JUL 00:00Z
    Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the deviceId parameter in the addWifiMacFilter function
    cvelistv5