What’s Vulnerable › Vulnerabilities

CVE-2023-37717

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-07-14 · updated 2026-06-17
• Weakness: CWE-787

Description

Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromDhcpListClient.

Affected products

• Tenda AC10: 1.0
• Tenda AC1206: 1.0
• Tenda AC5: 1.0
• Tenda AC7: 1.0
• Tenda AC9: 3.0
• Tenda F1202: 1.2.0.20(408), 1.0br
• Tenda FH1202: 1.2.0.19_en

References

• https://github.com/FirmRec/IoT-Vulns/blob/main/tenda/fromDhcpListClient/repot.md
• https://github.com/FirmRec/IoT-Vulns/blob/main/tenda/fromDhcpListClient/repot.md

Get alerted when CVE-2023-37717 or the next vulnerability affects your stack