CVE-2026-3378: Tenda F453 qossetting fromqossetting buffer overflow
A flaw has been found in Tenda F453 1.0.0.3. This affects the function fromqossetting of the file /goform/qossetting. Executing a manipulation of the argument qos can lead to buffer overflow. The attack can be launched remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3378?
CVE-2026-3378 has a high severity due to the potential for remote attackers to exploit the buffer overflow vulnerability.
How do I fix CVE-2026-3378?
To fix CVE-2026-3378, update the Tenda F453 firmware to the latest version provided by the vendor.
What are the potential impacts of CVE-2026-3378?
The potential impacts of CVE-2026-3378 include unauthorized access and execution of arbitrary code on the affected device.
Who is affected by CVE-2026-3378?
CVE-2026-3378 affects users of the Tenda F453 running version 1.0.0.3.
Can CVE-2026-3378 be exploited remotely?
Yes, CVE-2026-3378 can be exploited remotely by manipulating the qos argument.