CVE-2023-38933

UNKNOWN

Published 2023-08-07T00:00:00

Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2023-38933. We'll provide specific mitigation strategies based on your environment and risk profile.

No CVSS data available

Description

Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42_multi, and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the deviceId parameter in the formSetClientState function.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

Affected Products

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

⚠ Unreviewed CRITICAL

GHSA-7qcr-6r25-v563

Advisory Details

CVSS Scoring

CVSS Score

9.0

CVSS Vector


                                    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2023-38933

WEB https://github.com/FirmRec/IoT-Vulns/blob/main/tenda/formSetClientState/README.md

Advisory provided by GitHub Security Advisory Database. Published: August 7, 2023, Modified: April 4, 2024

References

https://github.com/FirmRec/IoT-Vulns/blob/main/tenda/formSetClientState/README.md

Published: 2023-08-07T00:00:00

Last Modified: 2024-10-17T13:51:46.931Z

Copied to clipboard!

CVE-2023-38933

Expert Analysis

Description

Available Exploits

Related News

Affected Products

ac7

Affected Versions:

f1203

Affected Versions:

ac5

Affected Versions:

fh1203

Affected Versions:

ac9

Affected Versions:

fh1205

Affected Versions:

ac6

Affected Versions:

GitHub Security Advisories

Advisory Details

CVSS Scoring

CVSS Score

CVSS Vector

References

References

Request Analysis

What to expect

Request Received!