CVE-2023-37717: Tenda AC10 Firmware

Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromDhcpListClient.

Affected products

• Tenda AC10 Firmware: version 1.0 only
• Tenda AC1206 Firmware: version 1.0 only
• Tenda AC5 Firmware: version 1.0 only
• Tenda AC7 Firmware: version 1.0 only
• Tenda AC9 Firmware: version 3.0 only
• Tenda f1202 Firmware: version 1.2.0.20(408) only; version 1.0br only
• Tenda FH1202 Firmware: version 1.2.0.19_en only

Published 2023-07-14. Last modified 2026-06-17.