CVE-2023-37718

Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromSafeClientFilter

published July 14, 2023

CVSS
—
EPSS
1%
Percentile
60.2
In the wild
Unconfirmed
What it is

⚠️ A sneaky stack overflow in Tenda's F1202 routers could lead to unexpected behaviors — that's like a restaurant running out of plates when the orders come in! Think of it like a conveyor belt at a restaurant. If too many plates stack up without being served, the whole operation jams up, and no orders can go out. This stack overflow could overload the system's ability to handle inputs, causing it to crash or behave unpredictably. If exploited, an attacker could potentially cause the router to crash or become unresponsive. This could leave your network vulnerable and disrupt connectivity, making it frustrating for users trying to access the internet. While there's no known exploitation yet, the potential for chaos is absolutely real!

Put simply

Think of it like a conveyor belt at a restaurant. If too many plates stack up without being served, the whole operation jams up, and no orders can go out. This stack overflow could overload the system's ability to handle inputs, causing it to crash or behave unpredictably. This vulnerability arises from a stack overflow triggered by the 'page' parameter in the 'fromSafeClientFilter' function, which could allow attackers to manipulate the execution flow of the software.

What to do

If exploited, an attacker could potentially cause the router to crash or become unresponsive. This could leave your network vulnerable and disrupt connectivity, making it frustrating for users trying to access the internet. While there's no known exploitation yet, the potential for chaos is absolutely real! To protect your network, upgrade to Tenda's latest firmware version, especially if you're using FH1202_V1.2.0.19_EN or F1202 V1.0BR_V1.2.0.20(408). Regularly check for updates to mitigate any potential risks. You've got this! With these steps, you'll keep your network safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00928 · 60.2th percentile
Published
2023-07-14T00:00Z
EPSS history
Timeline
  • 14 JUL 00:00Z
    Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromSafeClientFilter
    cvelistv5