PT-2023-3888 · Tenda · Tenda F1203

CVE-2023-37700

·

Publicado

2023-07-10

·

Atualizado

2023-07-13

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Tenda FH1203 version 2.0.1.6
Description The issue is related to a buffer overflow in the form fast setting wifi set function of the Tenda FH1203 router's firmware. This can be exploited by a remote attacker to cause a denial of service. The vulnerability is specifically tied to the ssid parameter in the form fast setting wifi set function.
Recommendations For Tenda FH1203 version 2.0.1.6, consider disabling the form fast setting wifi set function until a patch is available to prevent potential exploitation. Restrict access to the ssid parameter in the affected function to minimize the risk of a stack overflow. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

BDU:2023-04180
CVE-2023-37700

Produtos afetados

Tenda F1203