Security readout for executives and security teams
Plain-English summary
This CVE describes a stack overflow in a Jensen of Scandinavia Eagle 1200AC router firmware version. The issue is tied to the Wi-Fi basic settings endpoint and a WEP key field. The provided sources do not include a CVSS score, vendor fix, or evidence of active exploitation.
Executive priority
Treat this as a targeted network-device exposure check, not a confirmed emergency. Prioritize if affected routers are used in business networks or reachable from untrusted networks.
Technical view
CVE-2023-24129 reports a stack overflow in Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en through the wepkey4 parameter at /goform/WifiBasicSet. The public reference appears DoS-oriented, but the bundle does not provide CWE, CPE, CVSS, patch, or broader affected-version details.
Likely exposure
Likely exposure is limited to Jensen of Scandinavia Eagle 1200AC devices running V15.03.06.33_en and exposing the Wi-Fi settings handler. The source bundle does not confirm other models, versions, or CPE identifiers.
Exploitation context
The CVE is not listed as KEV in the provided bundle, and no cited source establishes active exploitation. Public information is sparse and does not support claims about exploitation in the wild.
Researcher notes
The record identifies the vulnerable parameter and endpoint, but evidence is incomplete. Missing CVSS, CWE, CPEs, patch status, and vendor advisory details reduce confidence in scope and severity assessment.
Mitigation direction
- Check Jensen of Scandinavia guidance for firmware updates or replacement advice.
- Restrict router administration access to trusted management networks only.
- Disable remote administration if it is enabled and unnecessary.
- Retire or replace affected devices if no supported firmware is available.
- Monitor for unexpected router reboots or configuration access anomalies.
Validation and detection
- Inventory Jensen Eagle 1200AC devices and record firmware versions.
- Confirm whether V15.03.06.33_en is present in the environment.
- Verify administrative interfaces are not internet-exposed.
- Review access logs for unusual /goform/WifiBasicSet requests.
- Document any vendor advisory, patch, or end-of-support finding.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2023-24129 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
SSVC decision data
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
ADP provider summaries
Source materials
- CVE List V5 sourceCVE List V5
- https://oxnan.com/posts/WifiBasic_wepkey4_DoSCVE reference, mitre
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.