CVE-2023-37717

Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromDhcpListClient.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2023-07-14

Last modified

2024-10-30

Weaknesses

CWE-787

Affected products

• Ac10 (Tenda)
• Ac10 Firmware (Tenda)
• Ac1206 (Tenda)
• Ac1206 Firmware (Tenda)
• Ac5 (Tenda)
• Ac5 Firmware (Tenda)
• Ac7 (Tenda)
• Ac7 Firmware (Tenda)
• Ac9 (Tenda)
• Ac9 Firmware (Tenda)
• F1202 (Tenda)
• F1202 Firmware (Tenda)
• Fh1202 (Tenda)
• Fh1202 Firmware (Tenda)

References

• https://github.com/FirmRec/IoT-Vulns/blob/main/tenda/fromDhcpListClient/repot.md