CVE-2023-38934

Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7(775) was discovered to contain a stack overflow via the deviceId parameter in the formSetDeviceName function.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2023-08-07

Last modified

2024-10-15

Weaknesses

CWE-787

Affected products

• F1203 (Tenda)
• F1203 Firmware (Tenda)
• Fh1203 (Tenda)
• Fh1203 Firmware (Tenda)
• Fh1205 (Tenda)
• Fh1205 Firmware (Tenda)

References

• https://github.com/FirmRec/IoT-Vulns/blob/main/tenda/formSetDeviceName/README.md