First published: Mon Aug 07 2023(Updated: )
Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7(775) was discovered to contain a stack overflow via the deviceId parameter in the formSetDeviceName function.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Tenda Fh1203 Firmware | =2.0.1.6 | |
Tenda FH1203 | ||
Tenda F1203 Firmware | =2.0.1.6 | |
Tenda F1203 | ||
Tenda Fh1205 Firmware | =2.0.0.7\(775\) | |
Tenda Fh1205 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-38934 is a vulnerability discovered in Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6, and FH1205 V2.0.0.7(775) devices, which allows for a stack overflow via the deviceId parameter in the formSetDeviceName function.
The affected software versions are Tenda F1203 V2.0.1.6 firmware, Tenda FH1203 V2.0.1.6 firmware, and Tenda FH1205 V2.0.0.7(775) firmware.
CVE-2023-38934 has a severity rating of 9.8 (Critical).
Currently, there is no known fix or patch for CVE-2023-38934. It is recommended to contact the vendor for further assistance.
You can find more information about CVE-2023-38934 on the GitHub repository: https://github.com/FirmRec/IoT-Vulns/blob/main/tenda/formSetDeviceName/README.md