PT-2023-4220 · Tenda · Tenda Fh1202+1
Published
2023-07-10
·
Updated
2025-01-06
·
CVE-2023-37712
CVSS v2.0
10
Critical
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Tenda AC1206 version 15.03.06.23
Tenda F1202 version 1.2.0.20(408)
Tenda FH1202 version 1.2.0.20(408)
Description
The issue is related to a stack overflow in the
page parameter in the fromSetIpBind function, which can allow a remote attacker to execute arbitrary code. This is due to a buffer overflow vulnerability in the firmware of the affected devices.Recommendations
For Tenda AC1206 version 15.03.06.23, consider disabling the
fromSetIpBind function until a patch is available.
For Tenda F1202 version 1.2.0.20(408), restrict access to the page parameter in the affected function to minimize the risk of exploitation.
For Tenda FH1202 version 1.2.0.20(408), avoid using the page parameter in the fromSetIpBind function until the issue is resolved.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Tenda Ac1206
Tenda Fh1202