Stack Overflow Vulnerability in Tenda Networking Devices

CVE-2023-38934

Summary

An issue has been identified in Tenda F1203, FH1203, and FH1205 devices where a stack overflow occurs via the deviceId parameter in the formSetDeviceName function. This vulnerability can potentially allow an attacker to exploit the affected devices, impacting their ability to manage and configure device names securely. Users of these devices should be cautious and look for firmware updates or patches from the vendor.

References