CVE-2026-3399 - Tenda F453 httpd GstDhcpSetSer fromGstDhcpSetSer buffer overflow

Back Back to CVE browser

HIGH

Tenda F453 httpd GstDhcpSetSer fromGstDhcpSetSer buffer overflow

Published Mar 1, 2026

8.7

HIGH

CVSS 4.0

EPSS 1.05%

Description

A vulnerability was identified in Tenda F453 1.0.0.3. Affected by this vulnerability is the function fromGstDhcpSetSer of the file /goform/GstDhcpSetSer of the component httpd. The manipulation of the argument dips leads to buffer overflow. The attack may be initiated remotely. The exploit is publicly available and might be used.

Affected products

Vendor Tenda Product n/a Default
n/a
- Version
  1.0.0.3
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Tenda

n/a

Version	Status	Constraints
1.0.0.3	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-119

Buffer Overflow

CWE-120

Classic Buffer Overflow

References (6)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-9132
Advisory
https://github.com/Litengzheng/vul_db/blob/main/F453/vul_83/README.md
exploitThird Party Advisory
https://vuldb.com/?ctiid.348294
signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.348294
vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.759631
third-party-advisoryThird Party AdvisoryVDB Entry
https://www.tenda.com.cn/
product

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-9132		Advisory
https://github.com/Litengzheng/vul_db/blob/main/F453/vul_83/README.md		exploitThird Party Advisory
https://vuldb.com/?ctiid.348294		signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.348294		vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.759631		third-party-advisoryThird Party AdvisoryVDB Entry
https://www.tenda.com.cn/		product