CVE-2023-38940: Critical severity tenda fh1203 firmware vulnerability
Published Aug 7, 2023
·Updated
Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the ssid parameter in the formfastsettingwifiset function.
Affected Software
6 affected components
Tenda Fh1203 Firmware=2.0.1.6
Tenda FH1203
Tenda F1203 Firmware=2.0.1.6
Tenda F1203
Tenda Fh1205 Firmware=2.0.0.7\(775\)
Tenda FH1205
Event History
Aug 7, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-38940?
The severity of CVE-2023-38940 is critical with a score of 9.8.
2
Which Tenda products are affected by CVE-2023-38940?
Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6, and FH1205 V2.0.0.7(775) are affected by CVE-2023-38940.
3
How does CVE-2023-38940 impact the affected Tenda products?
CVE-2023-38940 allows for a stack overflow vulnerability via the ssid parameter in the form_fast_setting_wifi_set function.
4
Is Tenda FH1203 firmware version 2.0.1.6 vulnerable to CVE-2023-38940?
Yes, Tenda FH1203 firmware version 2.0.1.6 is vulnerable to CVE-2023-38940.
5
How can I fix CVE-2023-38940?
Currently, there is no known fix or patch available for CVE-2023-38940. It is recommended to contact the vendor for further assistance.