CVE-2026-3167
HIGHTenda F453 1.0.0.3 - Buffer Overflow
Title source: llmDescription
A security flaw has been discovered in Tenda F453 1.0.0.3. The impacted element is the function formWebTypeLibrary of the file /goform/webtypelibrary of the component httpd. Performing a manipulation of the argument webSiteId results in buffer overflow. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.
Scores
CVSS v3
8.8
EPSS
0.0009
EPSS Percentile
26.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-119
CWE-120
Status
published
Affected Products (1)
tenda/f453_firmware
Timeline
Published
Feb 25, 2026
Tracked Since
Feb 25, 2026