F451 Firmware CVE-2026-3679
HIGHCVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
3DescriptionNVD
A vulnerability was identified in Tenda FH451 1.0.0.9. Affected by this vulnerability is the function formQuickIndex of the file /goform/QuickIndex. Such manipulation of the argument mit_linktype/PPPOEPassword leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
AnalysisAI
Remote code execution in Tenda FH451 firmware via stack-based buffer overflow in the QuickIndex function allows unauthenticated attackers to execute arbitrary code by sending crafted requests with oversized PPPOEPassword parameters. Public exploit code exists for this vulnerability, and no patch is currently available. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Inventory all Tenda FH451 devices in your environment and isolate affected units from critical network segments. Within 7 days: Implement network segmentation to restrict access to vulnerable devices, apply WAF rules to block malicious requests to /goform/QuickIndex endpoints, and disable remote management features if available. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today