CVE-2026-3801: falha de alta gravidade em Tenda i3
Tenda i3 setAutoPing formSetAutoPing stack-based overflow
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.7epss 0.7%
A vulnerability was found in Tenda i3 1.0.0.6(2204). Affected by this vulnerability is the function formSetAutoPing of the file /goform/setAutoPing. Performing a manipulation of the argument ping1/ping2 results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been made public and could be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Produtos afetados
Tenda · i3CVEs relacionadas — Tenda i3
No mesmo produto, das mais perigosas para as menos.
CVE-2026-3804HIGHTenda i3 WifiMacFilterSet formWifiMacFilterSet stack-based overflowEPSS 0.8%CVE-2026-3803HIGHTenda i3 WifiMacFilterGet formWifiMacFilterGet stack-based overflowEPSS 0.7%CVE-2026-3802HIGHTenda i3 exeCommand formexeCommand stack-based overflowEPSS 0.7%CVE-2026-3799HIGHTenda i3 setcfm formSetCfm stack-based overflowEPSS 0.7%CVE-2026-3971HIGHTenda i3 wifiSSIDset formwrlSSIDset stack-based overflowEPSS 0.7%CVE-2026-3970HIGHTenda i3 wifiSSIDget formwrlSSIDget stack-based overflowEPSS 0.7%
Referências
https://github.com/Svigo-o/Tenda_vul/tree/main/tenda-i3-setautoping-ping1-buffer-overflowhttps://github.com/Svigo-o/Tenda_vul/tree/main/tenda-i3-setautoping-ping2-buffer-overflowhttps://vuldb.com/?ctiid.349768https://vuldb.com/?id.349768https://vuldb.com/?submit.768980https://vuldb.com/?submit.768982https://www.tenda.com.cn/