CVE-2023-37701

Name of the Vulnerable Software and Affected Versions Tenda FH1203 version 2.0.1.6

Description The issue is related to a stack overflow in the addWifiMacFilter function, which can be triggered via the deviceId parameter. This could allow a remote attacker to execute arbitrary code.

Recommendations For Tenda FH1203 version 2.0.1.6, as a temporary workaround, consider disabling the addWifiMacFilter function until a patch is available. Restrict access to the deviceId parameter in the affected function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.