Vulnerability Details CVE-2023-38936
Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6, AC9 V3.0 V15.03.06.42_multi and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the speed_dir parameter in the formSetSpeedWan function.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 55.5%
CVSS Severity
CVSS v3 Score 9.8
Products affected by CVE-2023-38936
-
-
-
-
-
-
-
-
-
-
cpe:2.3:o:tenda:ac10_firmware:15.03.06.23
-
cpe:2.3:o:tenda:ac1206_firmware:15.03.06.23
-
cpe:2.3:o:tenda:ac5_firmware:15.03.06.28
-
cpe:2.3:o:tenda:ac6_firmware:15.03.06.23
-
cpe:2.3:o:tenda:ac7_firmware:15.03.06.44
-
cpe:2.3:o:tenda:ac9_firmware:15.03.06.42_multi
-
cpe:2.3:o:tenda:f1203_firmware:2.0.1.6
-
cpe:2.3:o:tenda:fh1203_firmware:2.0.1.6
-
cpe:2.3:o:tenda:fh1205_firmware:2.0.0.7(775)