CVE-2023-37717

Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromDhcpListClient.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.93% chance of exploitation in the next 30 days, 58th percentile

Published

2023-07-14

Updated

2024-10-30

Proof-of-concept exploits (1)

• FirmRec/IoT-Vulns/blob/main/tenda/fromDhcpListClient/repot.md

References

• CVE Record
• NVD entry

Related

• CVE-2023-31700
• CVE-2023-31701
• CVE-2023-37710
• CVE-2023-37711
• CVE-2023-37712
• CVE-2023-37714