Lucene search

MitreCVE-2023-38932

HistoryAug 07, 2023 - 7:15 p.m.

CVE-2023-38932

2023-08-0719:15:11

CWE-787

mitre

web.nvd.nist.gov

tenda

f1202

pa202

pw201a

fh1202

stack overflow

vulnerability

cve-2023-38932

nvd

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.001

Percentile

47.3%

JSON

Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the page parameter in the SafeEmailFilter function.

Affected configurations

Nvd

Node

tendaf1202_firmwareMatch1.2.0.9

AND

tendaf1202Match-

Node

tendapa202_firmwareMatch1.1.2.5

AND

tendapa202Match-

Node

tendapw201a_firmwareMatch1.1.2.5

AND

tendapw201aMatch-

Node

tendafh1202_firmwareMatch1.2.0.9

AND

tendafh1202Match-

VendorProductVersionCPE
tendaf1202_firmware1.2.0.9cpe:2.3:o:tenda:f1202_firmware:1.2.0.9:*:*:*:*:*:*:*
tendaf1202-cpe:2.3:h:tenda:f1202:-:*:*:*:*:*:*:*
tendapa202_firmware1.1.2.5cpe:2.3:o:tenda:pa202_firmware:1.1.2.5:*:*:*:*:*:*:*
tendapa202-cpe:2.3:h:tenda:pa202:-:*:*:*:*:*:*:*
tendapw201a_firmware1.1.2.5cpe:2.3:o:tenda:pw201a_firmware:1.1.2.5:*:*:*:*:*:*:*
tendapw201a-cpe:2.3:h:tenda:pw201a:-:*:*:*:*:*:*:*
tendafh1202_firmware1.2.0.9cpe:2.3:o:tenda:fh1202_firmware:1.2.0.9:*:*:*:*:*:*:*
tendafh1202-cpe:2.3:h:tenda:fh1202:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
tenda	f1202_firmware	1.2.0.9	cpe:2.3:o:tenda:f1202_firmware:1.2.0.9:::::::*
tenda	f1202	-	cpe:2.3:h:tenda:f1202:-:::::::*
tenda	pa202_firmware	1.1.2.5	cpe:2.3:o:tenda:pa202_firmware:1.1.2.5:::::::*
tenda	pa202	-	cpe:2.3:h:tenda:pa202:-:::::::*
tenda	pw201a_firmware	1.1.2.5	cpe:2.3:o:tenda:pw201a_firmware:1.1.2.5:::::::*
tenda	pw201a	-	cpe:2.3:h:tenda:pw201a:-:::::::*
tenda	fh1202_firmware	1.2.0.9	cpe:2.3:o:tenda:fh1202_firmware:1.2.0.9:::::::*
tenda	fh1202	-	cpe:2.3:h:tenda:fh1202:-:::::::*

References

github.com/FirmRec/IoT-Vulns/tree/main/tenda/formSafeEmailFilter

www.netgear.com/about/security/

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.001

Percentile

47.3%

JSON

Related for CVE-2023-38932