CVE-2023-37722

Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromSafeUrlFilter

published July 14, 2023

CVSS
—
EPSS
1%
Percentile
60.2
In the wild
Unconfirmed
What it is

⚠️ A sneaky stack overflow lurks in Tenda's F1202 router model, ready to unleash chaos! This vulnerable page parameter could make for a wild ride if left unchecked! 🔥 Think of it like a restaurant that accepts orders without verifying them. One rogue order could cause the kitchen to overflow with spaghetti, creating a messy situation that’s hard to manage! If exploited, an attacker could potentially manipulate the router's behavior, leading to service interruptions or unauthorized access. It’s not just a nuisance; it could disrupt your entire network!

Put simply

Think of it like a restaurant that accepts orders without verifying them. One rogue order could cause the kitchen to overflow with spaghetti, creating a messy situation that’s hard to manage! This vulnerability is a stack overflow in the function fromSafeUrlFilter, triggered by the page parameter. Without proper checks, it can lead to unpredictable behavior in the device.

What to do

If exploited, an attacker could potentially manipulate the router's behavior, leading to service interruptions or unauthorized access. It’s not just a nuisance; it could disrupt your entire network! Update the firmware to versions V1.2.0.21 or higher for the F1202 and V1.2.0.20 or higher for the FH1202. Always ensure that router settings are secured and unnecessary features are disabled. You've got this! Stay ahead of the game by keeping your devices updated and secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00928 · 60.2th percentile
Published
2023-07-14T00:00Z
EPSS history
Timeline
  • 14 JUL 00:00Z
    Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromSafeUrlFilter
    cvelistv5