Security readout for executives and security teams
Plain-English summary
This CVE describes a stack overflow in several Tenda router firmware versions. A malformed page parameter reaches the fromDhcpListClient function. The public record does not provide a CVSS score, patch information, or confirmed exploitation, so urgency depends on whether these exact devices and firmware are in use and reachable by untrusted users.
Executive priority
Treat this as an inventory and exposure-reduction priority, not a confirmed emergency. If affected routers are internet-facing or used in sensitive networks, prioritize isolation, firmware review, and replacement planning.
Technical view
CVE-2023-37717 affects listed Tenda F1202, FH1202, AC10, AC1206, AC7, AC5, and AC9 firmware versions. The vulnerable condition is a stack overflow involving the page parameter in fromDhcpListClient. The provided sources do not define CWE, exploit prerequisites, impact scope, or a vendor-fixed version.
Likely exposure
Exposure is most likely where the named Tenda router models run the specified firmware versions. Risk is higher if management functionality is reachable from untrusted networks. The sources do not confirm broad internet exposure or normalized CPE coverage.
Exploitation context
The CVE record and source bundle do not report active exploitation, and it is not listed as KEV. A public research reference exists, but the provided evidence does not establish weaponized exploitation, required authentication, or practical impact.
Researcher notes
Metadata is sparse: no CVSS, CWE, CPEs, or official fix is included in the provided bundle. Analysis should rely on exact model and firmware strings. Do not infer exploitability beyond the documented stack overflow.
Mitigation direction
- Inventory Tenda routers and compare model and firmware against the affected versions.
- Check Tenda vendor guidance for updated firmware or replacement recommendations.
- Restrict router management access to trusted administrative networks only.
- Disable external management exposure where operationally possible.
- Monitor affected devices for crashes, unexpected reboots, or configuration changes.
Validation and detection
- Confirm exact router model and firmware version from device administration records.
- Review whether management interfaces are reachable from WAN or guest networks.
- Check vulnerability scanners for model-specific coverage, not only CPE matching.
- Verify current vendor firmware availability before making remediation claims.
- Document compensating controls when replacement or upgrade is delayed.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2023-37717 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.