CVE-2023-38934

Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7(775) was discovered to contain a stack overflow via the deviceId parameter in the formSetDeviceName…

published August 7, 2023

CVSS
—
EPSS
1%
Percentile
57.4
In the wild
Unconfirmed
What it is

⚠️ A crafty stack overflow is lurking in the Tenda F1203 and FH1203 devices! This flaw stems from a sneaky deviceId parameter in the formSetDeviceName function. 🔍 Think of it like a crowded elevator that can only hold a certain number of people. If too many try to squeeze in, it causes a jam, and the whole system can crash! 📉 If exploited, an attacker could potentially cause the device to become unresponsive, leading to downtime. Imagine your smart home hub freezing up, leaving you in the dark—quite literally!

Put simply

Think of it like a crowded elevator that can only hold a certain number of people. If too many try to squeeze in, it causes a jam, and the whole system can crash! 📉 This vulnerability is a stack overflow triggered by excessive input in the deviceId parameter, which can overwhelm the device's memory management.

What to do

If exploited, an attacker could potentially cause the device to become unresponsive, leading to downtime. Imagine your smart home hub freezing up, leaving you in the dark—quite literally! To mitigate this, update your Tenda devices to the latest firmware versions: F1203 V2.0.1.7, FH1203 V2.0.1.7, and FH1205 V2.0.0.8 (775) as soon as they’re available. Regularly check for updates to ensure your devices stay secure! 🛡️ You've got this! Stay proactive, and you'll keep your devices running smoothly! 🚀

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00838 · 57.4th percentile
Published
2023-08-07T00:00Z
EPSS history
Timeline
  • 07 AUG 00:00Z
    Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7(775) was discovered to contain a stack overflow via the deviceId parameter in the formSetDeviceName…
    cvelistv5