CVE-2026-3272

HIGH

Tenda F453 1.0.0.3 - Buffer Overflow

Title source: llm

Description

A vulnerability was determined in Tenda F453 1.0.0.3. Affected is the function fromDhcpListClient of the file /goform/DhcpListClient of the component httpd. This manipulation of the argument page causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.

Scores

CVSS v3 8.8
EPSS 0.0008
EPSS Percentile 23.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

CWE
CWE-120 CWE-119
Status published

Affected Products (1)

tenda/f453_firmware

Timeline

Published Feb 27, 2026
Tracked Since Feb 27, 2026