Security Advisory

CVE-2026-3677

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-03-07 22:02:11
Last updated 2026-03-11 16:28:13
Assigner VulDB
State PUBLISHED

Description

A vulnerability was found in Tenda FH451 1.0.0.9. This impacts the function fromSetCfm of the file /goform/setcfm. The manipulation of the argument funcname/funcpara1 results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been made public and could be used.