CVE-2026-4554

MEDIUM

Tenda F453 WriteFacMac FormWriteFacMac privilege escalation

Title source: cna

Description

A security flaw has been discovered in Tenda F453 1.0.0.3. The affected element is the function FormWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac results in command injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.

References (5)

Scores

CVSS v3 6.3
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Details

CWE
CWE-74 CWE-77
Status published
Products (1)
Tenda/F453 < 1.0.0.3
Published Mar 22, 2026
Tracked Since Mar 22, 2026