A weakness has been identified in Tenda F453 1.0.0.3. This affects the function fromNatStaticSetting of the file /goform/NatStaticSetting of the component httpd. Executing a manipulation of the argument page can lead to buffer overflow. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.
References
| Link | Resource |
|---|---|
| https://github.com/Litengzheng/vul_db/blob/main/F453/vul_67/README.md | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.347675 | Permissions Required VDB Entry |
| https://vuldb.com/?id.347675 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.759595 | Third Party Advisory VDB Entry |
| https://www.tenda.com.cn/ | Product |
Configurations
Configuration 1 (hide)
| AND |
|
History
25 Feb 2026, 17:52
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Tenda
Tenda f453 Firmware Tenda f453 |
|
| CPE | cpe:2.3:h:tenda:f453:-:*:*:*:*:*:*:* cpe:2.3:o:tenda:f453_firmware:1.0.0.3:*:*:*:*:*:*:* |
|
| References | () https://github.com/Litengzheng/vul_db/blob/main/F453/vul_67/README.md - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.347675 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.347675 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.759595 - Third Party Advisory, VDB Entry | |
| References | () https://www.tenda.com.cn/ - Product |
25 Feb 2026, 07:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-02-25 07:16
Updated : 2026-02-25 17:52
NVD link : CVE-2026-3168
Mitre link : CVE-2026-3168
CVE.ORG link : CVE-2026-3168
JSON object : View
Products Affected
tenda
- f453_firmware
- f453
