CVE-2023-37704: Critical severity Tenda Fh1203 Firmware vulnerability
Published Jul 10, 2023
·Updated
Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the deviceId parameter in the formSetClientState function.
Affected Software
4 affected components
Tenda Fh1203 Firmware=2.0.1.6
Tenda FH1203
All of the following
Tenda Fh1203 Firmware=2.0.1.6
Tenda FH1203
Event History
Jul 10, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
05:15 PM
DescriptionSeverityWeaknessAffected Software
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-37704.
2
What is the severity of CVE-2023-37704?
The severity of CVE-2023-37704 is critical.
3
How does CVE-2023-37704 affect Tenda FH1203 V2.0.1.6?
CVE-2023-37704 affects Tenda FH1203 V2.0.1.6 by allowing a stack overflow through the deviceId parameter in the formSetClientState function.
4
Is there a fix available for CVE-2023-37704?
A fix for CVE-2023-37704 is not currently available. It is recommended to follow the vendor's security advisories for any updates.
5
Where can I find more information about CVE-2023-37704?
More information about CVE-2023-37704 can be found at the following reference: https://github.com/FirmRec/IoT-Vulns/tree/main/tenda/6901