Tenda F453 1.0.0.3 Can Be Hacked Remotely

Summary

A security flaw in Tenda F453 version 1.0.0.3 can be exploited by a hacker to take control of the device remotely. This could allow an attacker to do anything with the device, such as changing settings or accessing sensitive information. To protect your device, update to the latest version of the software.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software

Vendor	Product	Affected versions	Fix available
tenda	f453_firmware	1.0.0.3	–

Original title

A flaw has been found in Tenda F453 1.0.0.3. This affects the function fromqossetting of the file /goform/qossetting. Executing a manipulation of the argument qos can lead to buffer overflow. The a...

Original description

A flaw has been found in Tenda F453 1.0.0.3. This affects the function fromqossetting of the file /goform/qossetting. Executing a manipulation of the argument qos can lead to buffer overflow. The attack can be launched remotely. The exploit has been published and may be used.

nvd CVSS2.0 9.0

nvd CVSS3.1 8.8

nvd CVSS4.0 7.4

Vulnerability type

CWE-119 Buffer Overflow

CWE-120 Classic Buffer Overflow

https://github.com/Litengzheng/vul_db/blob/main/F453/vul_78/README.md Exploit Third Party Advisory
https://vuldb.com/?ctiid.348263 Permissions Required VDB Entry
https://vuldb.com/?id.348263 Third Party Advisory VDB Entry
https://vuldb.com/?submit.759625 Third Party Advisory VDB Entry
https://www.tenda.com.cn/ Product