PT-2026-22469 · Tenda · Tenda F453

Ltzhust2 · Published 2026-02-28 · Updated 2026-03-06 · CVE-2026-3380

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Tenda F453 version 1.0.0.3

Description A buffer overflow issue exists in the frmL7ImForm function of the /goform/L7Im file. The issue is triggered by manipulating the page argument. The exploit for this issue has been made public and could be used to launch attacks remotely.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the /goform/L7Im file to minimize the risk of exploitation.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

CWE-119

Related Identifiers

CVE-2026-3380

Affected Products

Tenda F453

References · 17

• 🔥 https://github.com/Litengzheng/vul_db/blob/main/F453/vul_81/README.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-3380 · Security Note
• https://osv.dev/vulnerability/CVE-2026-3380 · Vendor Advisory
• https://vuldb.com/?ctiid.348265 · Note
• https://twitter.com/vuldb/status/2027641710646595809 · Twitter Post
• https://tenda.com.cn · Note
• https://twitter.com/cracbot/status/2029512300655517708 · Twitter Post
• https://twitter.com/infoflowcloud/status/2027982367994900501 · Twitter Post
• https://twitter.com/vuldb/status/2027980043146956886 · Twitter Post
• https://twitter.com/cracbot/status/2029874752580637089 · Twitter Post
• https://t.me/cveNotify/153658 · Telegram Post
• https://vuldb.com/?submit.759629 · Note
• https://twitter.com/CveFindCom/status/2027967361660121373 · Twitter Post
• https://t.me/CVEtracker/46055 · Telegram Post
• https://vuldb.com/?id.348265 · Note