CVE-2023-38934

Summary

CVE-2023-38934 is a newly discovered vulnerability affecting Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6, and FH1205 V2.0.0.7 routers. The issue resides in the formSetDeviceName function where a stack overflow can be triggered via a maliciously crafted deviceId parameter. Successful exploitation could result in unintended server response or denial-of-service conditions, posing a potential risk to network security. Users are advised to update their router firmware to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.