CVE-2026-7033
Remote Buffer Overflow in Tenda F456 SafeClientFilter Function
Publication date: 2026-04-26
Last updated on: 2026-04-29
Assigner: VulDB
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| tenda | f456_firmware | 1.0.0.5 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-119 | The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data. |
| CWE-120 | The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2026-7033 is a stack-based buffer overflow vulnerability found in the Tenda F456 router version 1.0.0.5. It occurs in the HTTP daemon, specifically in the function fromSafeClientFilter when processing a user-supplied parameter named "menufacturer." If this parameter is set to "tenda," the function concatenates a variable to a stack buffer without checking its length, causing a buffer overflow.
An attacker can exploit this by sending a crafted HTTP POST request to the /goform/SafeClientFilter endpoint with the parameter menufacturer=tenda and an excessively long value for the parameter Go. This triggers the overflow, potentially allowing denial of service or remote code execution on the device.
How can this vulnerability impact me? :
This vulnerability can have serious impacts including denial of service (DoS) and remote code execution (RCE) on the affected Tenda F456 router. An attacker exploiting this flaw can crash the device or execute arbitrary code remotely, potentially taking full control of the router.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by monitoring for suspicious HTTP POST requests sent to the endpoint /goform/SafeClientFilter with the parameter menufacturer set to "tenda" and an unusually long value for the parameter Go.
A practical detection method is to capture and analyze network traffic for such crafted POST requests that may trigger the buffer overflow.
- Use a network packet capture tool like tcpdump or Wireshark to filter HTTP POST requests to /goform/SafeClientFilter.
- Example tcpdump command to capture relevant traffic: tcpdump -i <interface> -A 'tcp port 80 and (((ip[2:2] - ((ip[0]&0xf)<<2)) - ((tcp[12]&0xf0)>>2)) != 0)' | grep -i 'POST /goform/SafeClientFilter'
- Inspect captured HTTP POST data for the parameter menufacturer=tenda and check if the Go parameter contains an excessively long string.
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include restricting access to the vulnerable endpoint /goform/SafeClientFilter to trusted users only.
You should also monitor and block suspicious HTTP POST requests that contain the menufacturer=tenda parameter with unusually long Go parameter values.
If possible, update the router firmware to a version that patches this vulnerability or apply vendor-provided security updates.
As a temporary measure, consider disabling remote management or HTTP access to the router from untrusted networks.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
The provided information does not specify how the vulnerability CVE-2026-7033 affects compliance with common standards and regulations such as GDPR or HIPAA.