Cyber Posture

CVE-2026-3273

HighPublic PoC

Published: 27 February 2026

Published
27 February 2026
Modified
27 February 2026
KEV Added
—
Patch
—
CVSS Score 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0011 28.3th percentile
Risk Priority 18 60% EPSS · 20% KEV · 20% CVSS

Description

A vulnerability was identified in Tenda F453 1.0.0.3. Affected by this vulnerability is the function formWrlsafeset of the file /goform/AdvSetWrlsafeset of the component httpd. Such manipulation of the argument mit_ssid_index leads to buffer overflow. The attack can be executed remotely.…

more

The exploit is publicly available and might be used.

Mitigating Controls (NIST 800-53 r5)AI

SI-10 Information Input Validation good match
prevent

Directly prevents buffer overflows by validating inputs like the mit_ssid_index argument in the httpd form handler.

SI-16 Memory Protection good match
prevent

Mitigates buffer overflow exploitation through memory protections such as non-executable memory and address space randomization.

SI-2 Flaw Remediation good match
prevent

Ensures timely identification, reporting, and patching of flaws like this buffer overflow in Tenda F453 firmware.

Security SummaryAI

CVE-2026-3273 is a buffer overflow vulnerability in Tenda F453 firmware version 1.0.0.3. The flaw affects the formWrlsafeset function within the /goform/AdvSetWrlsafeset file of the httpd component, triggered by manipulation of the mit_ssid_index argument. Published on 2026-02-27, it is associated with CWE-119 and CWE-120.

The vulnerability carries a CVSS v3.1 base score of 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), indicating exploitation over the network with low complexity, low privileges required, and no user interaction. Remote attackers possessing low privileges, such as authenticated users, can trigger the buffer overflow to achieve high impacts on confidentiality, integrity, and availability.

VulDB advisories (ctiid.347997, id.347997, submit.759606) document the issue, and a proof-of-concept exploit is publicly available on GitHub at https://github.com/Litengzheng/vul_db/blob/main/F453/vul_73/README.md. The Tenda vendor website (https://www.tenda.com.cn/) is referenced, though specific mitigation or patch details are not outlined in the provided references.

Details

CWE(s)
CWE-119CWE-120

Affected Products

tenda
f453 firmware
1.0.0.3

MITRE ATT&CK Enterprise TechniquesAI

T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
attack.mitre.org →
T1068 Exploitation for Privilege Escalation Privilege Escalation
Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
attack.mitre.org →
Why these techniques?

Buffer overflow in public-facing httpd web form (formWrlsafeset) on network-accessible router firmware enables remote exploitation from low-privileged accounts for code execution and privilege escalation to achieve full CIA impact.

Confidence: HIGH · MITRE ATT&CK Enterprise v18.1

References