← Database

CVE-2026-3398

HIGH CVSS: 8.8 Published: 2026-03-01 Modified: 2026-06-17

Description

A vulnerability was determined in Tenda F453 1.0.0.3. Affected is the function fromAdvSetWan of the file /goform/AdvSetWan of the component httpd. Executing a manipulation of the argument wanmode/PPPOEPassword can lead to buffer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

Affected Platforms

Tenda F453 FirmwareTenda F453

Weakness Type

CWE-119, CWE-120

References