CVE-2023-38940: Tenda f1203 Firmware

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function.

Affected products

• Tenda f1203 Firmware: version 2.0.1.6 only
• Tenda FH1203 Firmware: version 2.0.1.6 only
• Tenda FH1205 Firmware: version 2.0.0.7(775) only

Published 2023-08-07. Last modified 2026-06-17.