CVE-2023-37714

Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromRouteStatic

published July 14, 2023

CVSS
—
EPSS
1%
Percentile
60.1
In the wild
Unconfirmed
What it is

⚠️ A sneaky stack overflow in the Tenda F1202 could have attackers doing a dance on your router! 🌐 Think of it like a waiter who tries to serve too many orders at once, leading to a chaotic mix-up in the kitchen—everything gets backed up and spills over! This vulnerability means your router could potentially take on more than it can handle, causing serious issues. An attacker could exploit this overflow to manipulate device behavior, leading to unexpected crashes or even taking control of the router. Imagine the chaos if someone could reroute your internet traffic or snoop on your data!

Put simply

Think of it like a waiter who tries to serve too many orders at once, leading to a chaotic mix-up in the kitchen—everything gets backed up and spills over! This vulnerability means your router could potentially take on more than it can handle, causing serious issues. The stack overflow occurs in the `fromRouteStatic` function when it improperly handles the `page` parameter, which allows attackers to cause crashes or execute arbitrary code if they can manipulate the input.

What to do

An attacker could exploit this overflow to manipulate device behavior, leading to unexpected crashes or even taking control of the router. Imagine the chaos if someone could reroute your internet traffic or snoop on your data! Update your Tenda devices to the latest firmware version to mitigate this risk. Stay vigilant by monitoring your device’s behavior and checking for any unusual activity. You've got this! Stay proactive, and soon your network will be as secure as a fortress! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00928 · 60.1th percentile
Published
2023-07-14T00:00Z
EPSS history
Timeline
  • 14 JUL 00:00Z
    Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromRouteStatic
    cvelistv5