CVE-2026-3273
Published: 27 February 2026
Summary
CVE-2026-3273 is a high-severity Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119) vulnerability in Tenda F453 Firmware. Its CVSS base score is 8.8 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 28.3th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-16 (Memory Protection).
Threat & Defense at a Glance
Threat & Defense Details
Mitigating Controls (NIST 800-53 r5)AI
Directly prevents buffer overflows by validating inputs like the mit_ssid_index argument in the httpd form handler.
Mitigates buffer overflow exploitation through memory protections such as non-executable memory and address space randomization.
Ensures timely identification, reporting, and patching of flaws like this buffer overflow in Tenda F453 firmware.
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Buffer overflow in public-facing httpd web form (formWrlsafeset) on network-accessible router firmware enables remote exploitation from low-privileged accounts for code execution and privilege escalation to achieve full CIA impact.
NVD Description
A vulnerability was identified in Tenda F453 1.0.0.3. Affected by this vulnerability is the function formWrlsafeset of the file /goform/AdvSetWrlsafeset of the component httpd. Such manipulation of the argument mit_ssid_index leads to buffer overflow. The attack can be executed remotely.…
more
The exploit is publicly available and might be used.
Deeper analysisAI
CVE-2026-3273 is a buffer overflow vulnerability in Tenda F453 firmware version 1.0.0.3. The flaw affects the formWrlsafeset function within the /goform/AdvSetWrlsafeset file of the httpd component, triggered by manipulation of the mit_ssid_index argument. Published on 2026-02-27, it is associated with CWE-119 and CWE-120.
The vulnerability carries a CVSS v3.1 base score of 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), indicating exploitation over the network with low complexity, low privileges required, and no user interaction. Remote attackers possessing low privileges, such as authenticated users, can trigger the buffer overflow to achieve high impacts on confidentiality, integrity, and availability.
VulDB advisories (ctiid.347997, id.347997, submit.759606) document the issue, and a proof-of-concept exploit is publicly available on GitHub at https://github.com/Litengzheng/vul_db/blob/main/F453/vul_73/README.md. The Tenda vendor website (https://www.tenda.com.cn/) is referenced, though specific mitigation or patch details are not outlined in the provided references.
Details
- CWE(s)