Tenda PW201A Firmware vulnerabilities

6 CVEs affecting Tenda PW201A Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-38938, published 2023-08-07.

More from Tenda.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-38932, published 2023-08-07. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the page parameter in the SafeEmailFilter function.
• CVE-2023-37723, published 2023-07-14. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromqossetting.
• CVE-2023-37721, published 2023-07-14. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromSafeMacFilter.
• CVE-2023-37719, published 2023-07-14. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromP2pListFilter.
• CVE-2023-37714, published 2023-07-14. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromRouteStatic.
• CVE-2023-38938, published 2023-08-07. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the page parameter at /L7Im.