CVE-2026-3274: falha de alta gravidade em Tenda F453
Tenda F453 httpd L7Prot frmL7ProtForm buffer overflow
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.7epss 1.0%
A security flaw has been discovered in Tenda F453 1.0.0.3. Affected by this issue is the function frmL7ProtForm of the file /goform/L7Prot of the component httpd. Performing a manipulation of the argument page results in buffer overflow. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Produtos afetados
Tenda · F453CVEs relacionadas — Tenda F453
No mesmo produto, das mais perigosas para as menos.
CVE-2026-4554MEDIUMTenda F453 WriteFacMac FormWriteFacMac privilege escalationEPSS 3.8%CVE-2026-3399HIGHTenda F453 httpd GstDhcpSetSer fromGstDhcpSetSer buffer overflowEPSS 3.7%CVE-2026-3168HIGHTenda F453 httpd NatStaticSetting fromNatStaticSetting buffer overflowEPSS 3.7%CVE-2026-6989MEDIUMTenda F453 Telnet Service telnet TendaTelnet command injectionEPSS 3.2%CVE-2026-3271HIGHTenda F453 httpd P2pListFilterof fromP2pListFilter buffer overflowEPSS 0.9%CVE-2026-3380HIGHTenda F453 L7Im frmL7ImForm buffer overflowEPSS 0.9%