CVE-2023-37723

Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromqossetting

published July 14, 2023

CVSS
—
EPSS
1%
Percentile
60.2
In the wild
Unconfirmed
What it is

⚠️ A surprising stack overflow lurks in the Tenda F1202 router, waiting for the right page parameter to trigger it! 🚨 Think of it like a water pipe that gets clogged because someone keeps adding more and more water. Eventually, it overflows, causing a mess that could be damaging! If an attacker were to exploit this stack overflow, they could potentially crash the router, leading to a loss of connectivity. In a home setting, this could disrupt your internet access for all devices, creating a frustrating experience for everyone.

Put simply

Think of it like a water pipe that gets clogged because someone keeps adding more and more water. Eventually, it overflows, causing a mess that could be damaging! The vulnerability arises in the 'fromqossetting' function, where the page parameter can be manipulated, leading to a stack overflow. This flaw can allow an attacker to cause a denial of service condition effectively.

What to do

If an attacker were to exploit this stack overflow, they could potentially crash the router, leading to a loss of connectivity. In a home setting, this could disrupt your internet access for all devices, creating a frustrating experience for everyone. To mitigate this issue, consider updating to the latest firmware version provided by Tenda as soon as it becomes available. Additionally, monitor your network for unusual behavior that could indicate an attempt to exploit this vulnerability. You've got this! With a proactive approach, you can keep your network protected and running smoothly! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00928 · 60.2th percentile
Published
2023-07-14T00:00Z
EPSS history
Timeline
  • 14 JUL 00:00Z
    Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromqossetting
    cvelistv5