1. Home
  2. CVE Database
  3. CVE-2023-38938
CRITICAL · 9.8

CVE-2023-38938

Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the page parameter at /L7Im.

Vulnerability Description

Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the page parameter at /L7Im.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
TendaF1202 Firmware1.2.0.9
TendaF1202-
TendaPa202 Firmware1.1.2.5
TendaPa202-
TendaPw201A Firmware1.1.2.5
TendaPw201A-
TendaFh1202 Firmware1.2.0.9
TendaFh1202-

Related Weaknesses (CWE)

CWE-787

References

FAQ

What is CVE-2023-38938?

CVE-2023-38938 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the page parameter at /L7Im.

How severe is CVE-2023-38938?

CVE-2023-38938 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2023-38938?

Check the references section above for vendor advisories and patch information. Affected products include: Tenda F1202 Firmware, Tenda F1202, Tenda Pa202 Firmware, Tenda Pa202, Tenda Pw201A Firmware.