critical9.8
CVE-2023-38933
Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42_multi, and FH1205 V2.0.0.7…
Impact
Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42_multi, and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the deviceId parameter in the formSetClientState function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tenda | Ac10 Firmware | Version 15.03.06.23 |
| Tenda | Ac1206 Firmware | Version 15.03.06.23 |
| Tenda | Ac6 Firmware | Version 15.03.06.23 |
| Tenda | Ac7 Firmware | Version 15.03.06.44 |
| Tenda | F1203 Firmware | Version 2.0.1.6 |
| Tenda | Ac5 Firmware | Version 15.03.06.28 |
| Tenda | Fh1203 Firmware | Version 2.0.1.6 |
| Tenda | Fh1205 Firmware | Version 2.0.0.7\(775\) |
| Tenda | Ac9 Firmware | Version 15.03.06.42_multi |