CVE-2023-37719

Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromP2pListFilter

published July 14, 2023

CVSS
—
EPSS
1%
Percentile
60.1
In the wild
Unconfirmed
What it is

⚠️ A sneaky stack overflow lurks within the Tenda F1202 router! 🚨 The vulnerable function can be exploited through the page parameter, making this a tricky one to spot! Think of it like having a waiter at a busy restaurant who, instead of noting down your order, keeps adding extra courses to the plate until it tips over — too much information can crash the whole system! An attacker could exploit this overflow to disrupt the router's functionality, potentially leading to denial of service. While it appears there’s no known exploitation yet, the risk of instability is still concerning, and it could compromise your network's reliability.

Put simply

Think of it like having a waiter at a busy restaurant who, instead of noting down your order, keeps adding extra courses to the plate until it tips over — too much information can crash the whole system! This vulnerability stems from a stack overflow in the function fromP2pListFilter, specifically targeting the page parameter. When excessive data is processed, the overflow could cause unexpected behaviors, including crashes or other vulnerabilities.

What to do

An attacker could exploit this overflow to disrupt the router's functionality, potentially leading to denial of service. While it appears there’s no known exploitation yet, the risk of instability is still concerning, and it could compromise your network's reliability. To mitigate this issue, update your Tenda F1202 router firmware to the latest version as soon as it is available. Regularly check for updates and ensure your router is configured with strong, unique passwords to limit exposure. You've got this! Stay vigilant, update your devices, and keep your network secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00928 · 60.1th percentile
Published
2023-07-14T00:00Z
EPSS history
Timeline
  • 14 JUL 00:00Z
    Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromP2pListFilter
    cvelistv5