CVE-2023-38940

Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the ssid parameter in the…

published August 7, 2023

CVSS
—
EPSS
1%
Percentile
57.4
In the wild
Unconfirmed
What it is

🚨 A stack overflow can be triggered by a simple SSID input in Tenda routers! This isn't just any oversight; it's the kind of vulnerability that could bring your network to its knees. 🔥 Think of it like trying to fit a king-sized mattress into a tiny studio apartment — eventually, something's going to give! When the SSID parameter is overloaded, it could lead to a chaotic overflow, leaving the router vulnerable to mishaps. If exploited, this stack overflow could lead to unexpected behaviors, crashes, or even unauthorized access to your device. Imagine your router acting like a toddler throwing a tantrum when overloaded — it just can't handle it!

Put simply

Think of it like trying to fit a king-sized mattress into a tiny studio apartment — eventually, something's going to give! When the SSID parameter is overloaded, it could lead to a chaotic overflow, leaving the router vulnerable to mishaps. The vulnerability exists in Tenda's firmware, where the 'ssid' parameter in the 'form_fast_setting_wifi_set' function does not properly validate input size, leading to a stack overflow. This flaw could be leveraged by an attacker to disrupt device functionality or potentially execute malicious code.

What to do

If exploited, this stack overflow could lead to unexpected behaviors, crashes, or even unauthorized access to your device. Imagine your router acting like a toddler throwing a tantrum when overloaded — it just can't handle it! To secure your network, update your Tenda F1203, FH1203, or FH1205 models to the latest firmware version as soon as possible. Regularly check for updates and ensure that any configurations are within safe input limits. You've got this! A quick firmware update will have your routers back in tip-top shape, protecting your network like a superhero! 🦸‍♂️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00838 · 57.4th percentile
Published
2023-08-07T00:00Z
EPSS history
Timeline
  • 07 AUG 00:00Z
    Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the ssid parameter in the…
    cvelistv5