Severity
7.4HIGH
EPSS
0.1%
top 74.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 9

Description

A vulnerability was identified in Tenda i3 1.0.0.6(2204). This affects the function formWifiMacFilterGet of the file /goform/WifiMacFilterGet. The manipulation of the argument index leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Packages2 packages

CVEListV5tenda/i31.0.0.6(2204)
NVDtenda/i3_firmware1.0.0.6\(2204\)

🔴Vulnerability Details

2
GHSA
GHSA-9r9x-93jv-xc8p: A vulnerability was identified in Tenda i3 12026-03-09
CVEList
Tenda i3 WifiMacFilterGet formWifiMacFilterGet stack-based overflow2026-03-09