CVE-2023-37702

Name of the Vulnerable Software and Affected Versions Tenda FH1203 version 2.0.1.6

Description The issue is related to a stack overflow in the formSetDeviceName function, specifically via the deviceId parameter. This can potentially allow a remote attacker to cause a denial of service.

Recommendations For Tenda FH1203 version 2.0.1.6, as a temporary workaround, consider disabling the formSetDeviceName function until a patch is available. Avoid using the deviceId parameter in the affected function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.