Lucene search

K
cve[email protected]CVE-2023-37718
HistoryJul 14, 2023 - 12:15 a.m.

CVE-2023-37718

2023-07-1400:15:09
CWE-787
web.nvd.nist.gov
17
cve-2023-37718
tenda
f1202
v1.0br
v1.2.0.20
fh1202
v1.2.0.19
stack overflow
page parameter
fromsafeclientfilter
nvd

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.002

Percentile

52.1%

Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromSafeClientFilter.

Affected configurations

NVD
Node
tendaf1202_firmwareMatch1.2.0.20\(408\)
AND
tendaf1202Match-
Node
tendafh1202_firmwareMatch1.2.0.19_en
AND
tendafh1202Match-
Node
tendaf1202_firmwareMatch1.0br
AND
tendaf1202Match-
Node
tenda4g300_firmwareMatch-
AND
tenda4g300Match-
VendorProductVersionCPE
tendaf1202_firmware1.2.0.20%28408%29cpe:/o:tenda:f1202_firmware:1.2.0.20%28408%29:::

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.002

Percentile

52.1%

Related for CVE-2023-37718