CVE-2023-37719
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Jul 14, 2023
Updated: Jul 21, 2023
CWE ID 787
Summary
CVE-2023-37719 is a newly discovered vulnerability affecting Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN routers. This issue stems from a stack overflow in the page parameter found within the function fromP2pListFilter. An attacker could exploit this flaw by sending specially crafted data to the affected routers, potentially leading to unintended functionality, denial-of-service conditions, or even remote code execution with administrative privileges. Users are advised to apply the relevant patches as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Vendors
- Shenzhen Tenda Technology Co. Ltd