CVE-2023-37716

Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow…

published July 14, 2023

CVSS
—
EPSS
1%
Percentile
60.1
In the wild
Unconfirmed
What it is

⚠️ A sneaky stack overflow lurks in Tenda routers, just waiting for someone to trip over the page parameter! Think of it like a restaurant where one overloaded order can cause the kitchen to spill over with chaos — a single miscalculation in customer requests leads to a complete breakdown of service. In this case, the overflow can disrupt the system itself! This vulnerability could potentially allow an attacker to crash the router or even escalate privileges by manipulating input, opening the door to unauthorized access and making your network vulnerable. An unexpected kitchen disaster could leave your data exposed!

Put simply

Think of it like a restaurant where one overloaded order can cause the kitchen to spill over with chaos — a single miscalculation in customer requests leads to a complete breakdown of service. In this case, the overflow can disrupt the system itself! In the Tenda routers listed (including F1202 and AC models), the stack overflow occurs in the fromNatStaticSetting function when handling the page parameter, allowing an attacker to inject excessive data that corrupts the stack.

What to do

This vulnerability could potentially allow an attacker to crash the router or even escalate privileges by manipulating input, opening the door to unauthorized access and making your network vulnerable. An unexpected kitchen disaster could leave your data exposed! To protect your network, update your Tenda router firmware to the latest version available from the manufacturer. Regularly check for updates and consider changing default settings to strengthen security. Don't forget to keep an eye out for any patches specifically addressing this vulnerability! You've got this! With a few quick updates, you'll keep your network safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00928 · 60.1th percentile
Published
2023-07-14T00:00Z
EPSS history
Timeline
  • 14 JUL 00:00Z
    Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow…
    cvelistv5