Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7(775) was discovered to contain a stack overflow via the deviceId parameter in the formSetDeviceName function.
References
| Link | Resource |
|---|---|
| https://github.com/FirmRec/IoT-Vulns/blob/main/tenda/formSetDeviceName/README.md | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
History
09 Aug 2023, 18:06
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://github.com/FirmRec/IoT-Vulns/blob/main/tenda/formSetDeviceName/README.md - Exploit, Third Party Advisory | |
| First Time |
Tenda fh1203
Tenda Tenda fh1205 Tenda fh1203 Firmware Tenda f1203 Firmware Tenda fh1205 Firmware Tenda f1203 |
|
| CWE | CWE-787 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| CPE | cpe:2.3:o:tenda:fh1203_firmware:2.0.1.6:*:*:*:*:*:*:* cpe:2.3:h:tenda:f1203:-:*:*:*:*:*:*:* cpe:2.3:h:tenda:fh1203:-:*:*:*:*:*:*:* cpe:2.3:h:tenda:fh1205:-:*:*:*:*:*:*:* cpe:2.3:o:tenda:f1203_firmware:2.0.1.6:*:*:*:*:*:*:* cpe:2.3:o:tenda:fh1205_firmware:2.0.0.7\(775\):*:*:*:*:*:*:* |
07 Aug 2023, 19:30
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-07 19:15
Updated : 2023-12-10 15:14
NVD link : CVE-2023-38934
Mitre link : CVE-2023-38934
CVE.ORG link : CVE-2023-38934
JSON object : View
Products Affected
tenda
- fh1203
- fh1203_firmware
- f1203_firmware
- fh1205
- f1203
- fh1205_firmware
CWE
CWE-787
Out-of-bounds Write