Tenda F453 Router: Remote Code Execution Vulnerability

Summary

A flaw in the Tenda F453 router's SafeMacFilter function makes it possible for an attacker to execute malicious code remotely. This could allow them to take control of the router and potentially access or disrupt connected devices. Router owners should update to the latest firmware to fix this issue.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software

Vendor	Product	Affected versions	Fix available
tenda	f453_firmware	1.0.0.3	–

Original title

A security vulnerability has been detected in Tenda F453 1.0.0.3. Affected by this vulnerability is the function fromSafeMacFilter of the file /goform/SafeMacFilter. Such manipulation of the argume...

Original description

A security vulnerability has been detected in Tenda F453 1.0.0.3. Affected by this vulnerability is the function fromSafeMacFilter of the file /goform/SafeMacFilter. Such manipulation of the argument page leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.

nvd CVSS2.0 9.0

nvd CVSS3.1 8.8

nvd CVSS4.0 7.4

Vulnerability type

CWE-119 Buffer Overflow

CWE-120 Classic Buffer Overflow

https://github.com/Litengzheng/vul_db/blob/main/F453/vul_76/README.md Exploit Third Party Advisory
https://vuldb.com/?ctiid.348261 Permissions Required VDB Entry
https://vuldb.com/?id.348261 Third Party Advisory VDB Entry
https://vuldb.com/?submit.759623 Third Party Advisory VDB Entry
https://www.tenda.com.cn/ Product