Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function.
References
| Link | Resource |
|---|---|
| https://github.com/FirmRec/IoT-Vulns/tree/main/tenda/form_fast_setting_wifi_set | Exploit Third Party Advisory |
| https://github.com/FirmRec/IoT-Vulns/tree/main/tenda/form_fast_setting_wifi_set | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
History
21 Nov 2024, 08:14
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/FirmRec/IoT-Vulns/tree/main/tenda/form_fast_setting_wifi_set - Exploit, Third Party Advisory |
09 Aug 2023, 18:06
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Tenda f1203
Tenda f1203 Firmware Tenda Tenda fh1205 Firmware Tenda fh1205 Tenda fh1203 Firmware Tenda fh1203 |
|
| References | (MISC) https://github.com/FirmRec/IoT-Vulns/tree/main/tenda/form_fast_setting_wifi_set - Exploit, Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| CWE | CWE-787 | |
| CPE | cpe:2.3:o:tenda:f1203_firmware:2.0.1.6:*:*:*:*:*:*:* cpe:2.3:h:tenda:fh1203:-:*:*:*:*:*:*:* cpe:2.3:h:tenda:fh1205:-:*:*:*:*:*:*:* cpe:2.3:o:tenda:fh1205_firmware:2.0.0.7\(775\):*:*:*:*:*:*:* cpe:2.3:o:tenda:fh1203_firmware:2.0.1.6:*:*:*:*:*:*:* cpe:2.3:h:tenda:f1203:-:*:*:*:*:*:*:* |
07 Aug 2023, 19:30
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-07 19:15
Updated : 2024-11-21 08:14
NVD link : CVE-2023-38940
Mitre link : CVE-2023-38940
CVE.ORG link : CVE-2023-38940
JSON object : View
Products Affected
tenda
- fh1205_firmware
- f1203_firmware
- fh1203_firmware
- fh1203
- fh1205
- f1203
CWE
CWE-787
Out-of-bounds Write