Lucene search

[email protected]CVE-2023-37717

HistoryJul 14, 2023 - 12:15 a.m.

CVE-2023-37717

2023-07-1400:15:09

CWE-787

[email protected]

web.nvd.nist.gov

tenda

f1202

fh1202

ac10

ac1206

ac7

ac5

ac9

stack overflow

cve-2023-37717

nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.1%

JSON

Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromDhcpListClient.

Affected configurations

NVD

Node

tendaf1202_firmwareMatch1.2.0.20\(408\)

AND

tendaf1202Match-

Node

tendafh1202_firmwareMatch1.2.0.19_en

AND

tendafh1202Match-

Node

tendaf1202_firmwareMatch1.0br

AND

tendaf1202Match-

Node

tendaac10_firmwareMatch1.0

AND

tendaac10Match-

Node

tendaac1206_firmwareMatch1.0

AND

tendaac1206Match-

Node

tendaac7_firmwareMatch1.0

AND

tendaac7Match-

Node

tendaac5_firmwareMatch1.0

AND

tendaac5Match-

Node

tendaac9_firmwareMatch3.0

AND

tendaac9Match-

CPENameOperatorVersion
tenda:f1202_firmwaretenda f1202 firmwareeq1.2.0.20\(408\)

CPE	Name	Operator	Version
tenda:f1202_firmware	tenda f1202 firmware	eq	1.2.0.20\(408\)

References

github.com/FirmRec/IoT-Vulns/blob/main/tenda/fromDhcpListClient/repot.md

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.1%

JSON

Related for CVE-2023-37717

cvelist1 prion1 nvd1