CVE-2023-37703: Critical severity Tenda Fh1203 Firmware vulnerability
Published Jul 10, 2023
·Updated
Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the speeddir parameter in the formSetSpeedWan function.
Affected Software
4 affected components
Tenda Fh1203 Firmware=2.0.1.6
Tenda FH1203
All of the following
Tenda Fh1203 Firmware=2.0.1.6
Tenda FH1203
Event History
Jul 10, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
05:15 PM
DescriptionSeverityWeaknessAffected Software
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-37703?
The severity of CVE-2023-37703 is critical with a CVSS score of 9.8.
2
What is affected by CVE-2023-37703?
The Tenda FH1203 V2.0.1.6 firmware is affected by CVE-2023-37703.
3
How can the vulnerability CVE-2023-37703 be exploited?
The vulnerability CVE-2023-37703 can be exploited by sending a malicious request with a specially crafted speed_dir parameter to the formSetSpeedWan function.
4
Is Tenda FH1203 firmware version 2.0.1.6 vulnerable to CVE-2023-37703?
Yes, Tenda FH1203 firmware version 2.0.1.6 is vulnerable to CVE-2023-37703.
5
Where can I find more information about CVE-2023-37703?
More information about CVE-2023-37703 can be found at the following reference: https://github.com/FirmRec/IoT-Vulns/tree/main/tenda/6907.