CVE-2026-3380

7.4 highEPSS 0.9%

High (7.4) in tenda f453 firmware. EPSS 0.9% chance of exploitation in the next 30 days.

A vulnerability was found in Tenda F453 1.0.0.3. This issue affects the function frmL7ImForm of the file /goform/L7Im. The manipulation of the argument page results in buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used.

Severity

CVSS 4.0

7.4 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-31)
CWEs: CWE-119, CWE-120
Published: 2026-03-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

tenda:f453_firmware

References

https://github.com/Litengzheng/vul_db/blob/main/F453/vul_81/README.md
https://vuldb.com/?ctiid.348265
https://vuldb.com/?id.348265
https://vuldb.com/?submit.759629
https://www.tenda.com.cn/

Check your stack JSON