Sign-up

ID

VAR-202307-1306


CVE

CVE-2023-37716


TITLE

Tenda F1202 Buffer error vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-202307-1255

DESCRIPTION

Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromNatStaticSetting

Trust: 0.99

sources: NVD: CVE-2023-37716 // VULMON: CVE-2023-37716

AFFECTED PRODUCTS

vendor:tendamodel:f1202scope:eqversion:1.0br

Trust: 1.0

vendor:tendamodel:ac9scope:eqversion:3.0

Trust: 1.0

vendor:tendamodel:ac5scope:eqversion:1.0

Trust: 1.0

vendor:tendamodel:f1202scope:eqversion:1.2.0.20\(408\)

Trust: 1.0

vendor:tendamodel:ac1206scope:eqversion:1.0

Trust: 1.0

vendor:tendamodel:fh1202scope:eqversion:1.2.0.19_en

Trust: 1.0

vendor:tendamodel:ac7scope:eqversion:1.0

Trust: 1.0

vendor:tendamodel:ac10scope:eqversion:1.0

Trust: 1.0

sources: NVD: CVE-2023-37716

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2023-37716
value: CRITICAL

Trust: 1.0

CNNVD: CNNVD-202307-1255
value: CRITICAL

Trust: 0.6

nvd@nist.gov: CVE-2023-37716
baseSeverity: CRITICAL
baseScore: 9.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 3.9
impactScore: 5.9
version: 3.1

Trust: 1.0

sources: CNNVD: CNNVD-202307-1255 // NVD: CVE-2023-37716

PROBLEMTYPE DATA

problemtype:CWE-787

Trust: 1.0

sources: NVD: CVE-2023-37716

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202307-1255

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-202307-1255

EXTERNAL IDS

db:NVDid:CVE-2023-37716

Trust: 1.7

db:CNNVDid:CNNVD-202307-1255

Trust: 0.6

db:VULMONid:CVE-2023-37716

Trust: 0.1

sources: VULMON: CVE-2023-37716 // CNNVD: CNNVD-202307-1255 // NVD: CVE-2023-37716

REFERENCES

url:https://github.com/firmrec/iot-vulns/blob/main/tenda/fromnatstaticsetting/report.md

Trust: 1.7

url:https://cxsecurity.com/cveshow/cve-2023-37716/

Trust: 0.6

url:https://nvd.nist.gov/vuln/detail/cve-2023-37716

Trust: 0.6

url:https://nvd.nist.gov

Trust: 0.1

sources: VULMON: CVE-2023-37716 // CNNVD: CNNVD-202307-1255 // NVD: CVE-2023-37716

SOURCES

db:VULMONid:CVE-2023-37716
db:CNNVDid:CNNVD-202307-1255
db:NVDid:CVE-2023-37716

LAST UPDATE DATE

2024-08-14T14:09:54.108000+00:00


SOURCES UPDATE DATE

db:VULMONid:CVE-2023-37716date:2023-07-14T00:00:00
db:CNNVDid:CNNVD-202307-1255date:2023-07-24T00:00:00
db:NVDid:CVE-2023-37716date:2023-07-21T14:33:30.690

SOURCES RELEASE DATE

db:VULMONid:CVE-2023-37716date:2023-07-14T00:00:00
db:CNNVDid:CNNVD-202307-1255date:2023-07-13T00:00:00
db:NVDid:CVE-2023-37716date:2023-07-14T00:15:09.430