CVE-2026-3165

A vulnerability was determined in Tenda F453 1.0.0.3. Impacted is the function fromSetWifiGusetBasic of the file /goform/AdvSetWrlsafeset of the component httpd. This manipulation of the argument mit_ssid causes buffer overflow. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
References
Link Resource
https://github.com/Litengzheng/vul_db/blob/main/F453/vul_64/README.md Exploit Third Party Advisory
https://vuldb.com/?ctiid.347672 Permissions Required VDB Entry
https://vuldb.com/?id.347672 Third Party Advisory VDB Entry
https://vuldb.com/?submit.759587 Third Party Advisory VDB Entry
https://www.tenda.com.cn/ Product
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:tenda:f453_firmware:1.0.0.3:*:*:*:*:*:*:*
cpe:2.3:h:tenda:f453:-:*:*:*:*:*:*:*

History

25 Feb 2026, 17:53

Type Values Removed Values Added
References () https://github.com/Litengzheng/vul_db/blob/main/F453/vul_64/README.md - () https://github.com/Litengzheng/vul_db/blob/main/F453/vul_64/README.md - Exploit, Third Party Advisory
References () https://vuldb.com/?ctiid.347672 - () https://vuldb.com/?ctiid.347672 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.347672 - () https://vuldb.com/?id.347672 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.759587 - () https://vuldb.com/?submit.759587 - Third Party Advisory, VDB Entry
References () https://www.tenda.com.cn/ - () https://www.tenda.com.cn/ - Product
CPE cpe:2.3:h:tenda:f453:-:*:*:*:*:*:*:*
cpe:2.3:o:tenda:f453_firmware:1.0.0.3:*:*:*:*:*:*:*
First Time Tenda
Tenda f453 Firmware
Tenda f453

25 Feb 2026, 06:16

Type Values Removed Values Added
New CVE

Information

Published : 2026-02-25 06:16

Updated : 2026-02-25 17:53


NVD link : CVE-2026-3165

Mitre link : CVE-2026-3165

CVE.ORG link : CVE-2026-3165


JSON object : View

Products Affected

tenda

  • f453_firmware
  • f453
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')