Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.4
CVE-2026-3398: Tenda F453 1.0.0.3: Unsecured Function Allows Remote Attack
CVE-2026-3398 · published 8 months ago
Summary
A security flaw in the Tenda F453 1.0.0.3 allows hackers to potentially take control of your router from the internet. This could give them access to your network and the devices connected to it. Update your router software as soon as possible to fix this issue.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| tenda | f453_firmware |
1.0.0.3 cpe:2.3:o:tenda:f453_firmware:1.0.0.3:*:*:*:*:*:*:* |
Original advisory text
A vulnerability was determined in Tenda F453 1.0.0.3. Affected is the function fromAdvSetWan of the file /goform/AdvSetWan of the component httpd. Executing a manipulation of the argument wanmode/P...
A vulnerability was determined in Tenda F453 1.0.0.3. Affected is the function fromAdvSetWan of the file /goform/AdvSetWan of the component httpd. Executing a manipulation of the argument wanmode/PPPOEPassword can lead to buffer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.
References
- https://github.com/Litengzheng/vul_db/blob/main/F453/vul_82/README.md Exploit Third Party Advisory
- https://vuldb.com/?ctiid.348293 Permissions Required VDB Entry
- https://vuldb.com/?id.348293 Third Party Advisory VDB Entry
- https://vuldb.com/?submit.759630 Third Party Advisory VDB Entry
- https://www.tenda.com.cn/ Product
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Type
CWE-119Buffer Overflow
CWE-120Classic Buffer Overflow
Timeline
Published1 Mar 2026
Updated31 Oct 2026
First seen6 Mar 2026
Sources
CVE-2026-3398 · NVD
Track software like this
Free during beta