CVE-2026-7081
Buffer Overflow in Tenda F456 HTTPD Allows Remote Exploitation
Publication date: 2026-04-27
Last updated on: 2026-04-30
Assigner: VulDB
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| tenda | f456_firmware | 1.0.0.5 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-119 | The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data. |
| CWE-120 | The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
The CVE-2026-7081 vulnerability affects the Tenda F456 router, version 1.0.0.5. It is a stack-based buffer overflow in the HTTP daemon (httpd), specifically in the function fromGstDhcpSetSer. This function processes a user-supplied parameter named "dips" and copies it into a stack buffer without checking the length of the input. An attacker can exploit this by sending an excessively long "dips" parameter in a POST request to the /goform/GstDhcpSetSer endpoint, causing a buffer overflow.
This overflow can lead to denial of service or remote code execution on the device.
How can this vulnerability impact me? :
Exploitation of this vulnerability can allow an attacker to cause a denial of service or execute arbitrary code remotely on the affected Tenda F456 router. This means the attacker could potentially take control of the device, disrupt its normal operation, or use it as a foothold within a network.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by monitoring for POST requests to the endpoint /goform/GstDhcpSetSer that contain an unusually large or excessively long "dips" parameter.
A practical detection method is to capture and analyze HTTP traffic targeting the Tenda F456 router, specifically looking for POST requests with the "dips" parameter in the payload.
For example, using command-line tools like curl or netcat, you can attempt to send a POST request with a large "dips" value to test if the device responds abnormally or crashes.
- curl -X POST http://<router-ip>/goform/GstDhcpSetSer -d "dips=$(python3 -c 'print("A"*1000)')"
- Use network packet capture tools like tcpdump or Wireshark to filter and inspect POST requests to /goform/GstDhcpSetSer for suspiciously large "dips" parameters.
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include restricting access to the vulnerable endpoint /goform/GstDhcpSetSer by implementing network-level controls such as firewall rules to block unauthorized or external access.
Additionally, monitor the device for unusual behavior or crashes that may indicate exploitation attempts.
If possible, update the firmware of the Tenda F456 router to a version that patches this vulnerability or contact the vendor for an official fix.
Until a patch is available, avoid exposing the device's management interface to untrusted networks.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
The provided information does not specify any direct impact of the CVE-2026-7081 vulnerability on compliance with common standards and regulations such as GDPR or HIPAA.