CVE-2023-37703

Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the speed_dir parameter in the formSetSpeedWan function

published July 10, 2023

CVSS
—
EPSS
1%
Percentile
65.7
In the wild
Unconfirmed
What it is

⚠️ A stack overflow in the Tenda FH1203 could send your router into a tailspin! This vulnerability hides in the speed_dir parameter of the formSetSpeedWan function, and it’s just waiting to be discovered. 🔥 Think of a stack overflow like a busy restaurant that accepts way too many reservations at once, leading to chaos in the kitchen. In this case, the router gets overwhelmed trying to process more data than it can handle, potentially causing a complete crash. If exploited, an attacker could send excessive data to the router, leading to unexpected behaviors or a full system failure. This could disrupt your network connectivity in frustrating ways, leaving your smart devices in the dark!

Put simply

Think of a stack overflow like a busy restaurant that accepts way too many reservations at once, leading to chaos in the kitchen. In this case, the router gets overwhelmed trying to process more data than it can handle, potentially causing a complete crash. The vulnerability occurs due to a stack overflow caused by improper handling of the speed_dir parameter within the formSetSpeedWan function. When too much data is sent, it overwhelms the stack and can lead to instability.

What to do

If exploited, an attacker could send excessive data to the router, leading to unexpected behaviors or a full system failure. This could disrupt your network connectivity in frustrating ways, leaving your smart devices in the dark! To mitigate this issue, update your Tenda FH1203 router to the latest firmware version as soon as it's available. Regularly check for updates and ensure your router is configured securely to minimize risks. You've got this! Stay proactive with your security measures, and you'll keep your network safe and sound! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01112 · 65.7th percentile
Published
2023-07-10T00:00Z
EPSS history
Timeline
  • 10 JUL 00:00Z
    Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the speed_dir parameter in the formSetSpeedWan function
    cvelistv5