CVE-2026-3399: Tenda F453 httpd GstDhcpSetSer fromGstDhcpSetSer buffer overflow
A vulnerability was identified in Tenda F453 1.0.0.3. Affected by this vulnerability is the function fromGstDhcpSetSer of the file /goform/GstDhcpSetSer of the component httpd. The manipulation of the argument dips leads to buffer overflow. The attack may be initiated remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3399?
CVE-2026-3399 has a high severity rating due to the potential for remote code execution resulting from a buffer overflow.
How do I fix CVE-2026-3399?
To mitigate CVE-2026-3399, ensure that you update the Tenda F453 firmware to the latest version that addresses this vulnerability.
What component is affected by CVE-2026-3399?
CVE-2026-3399 affects the httpd component specifically within the fromGstDhcpSetSer function.
What version of Tenda F453 is vulnerable to CVE-2026-3399?
The vulnerability CVE-2026-3399 affects Tenda F453 version 1.0.0.3.
What type of vulnerability is CVE-2026-3399?
CVE-2026-3399 is classified as a buffer overflow vulnerability.