Tenda EUVD-2026-14281

Requires authenticated access to Tenda FH451 firmware version 1.0.0.9. Attacker must send crafted input to the /goform/WrlExtraSet endpoint with a malicious GO parameter to trigger stack-based buffer overflow in formWrlExtraSet function.

This vulnerability presents a high real-world risk despite requiring low-privilege authentication (PR:L). The CVSS score of 8.8 reflects the network-based attack vector (AV:N), low attack complexity (AC:L), and high impact across all CIA triad elements. The existence of a publicly available exploit (E:P) on GitHub significantly elevates the risk, as it enables even unsophisticated attackers to weaponize this vulnerability. The lack of vendor response or remediation level information (RL:X) suggests no official patch may be available, leaving affected devices vulnerable indefinitely. While authentication is required, many consumer routers retain default credentials or use weak passwords, effectively lowering this barrier. The combination of public exploit code, network accessibility, high impact, and apparent lack of vendor patching makes this a genuine priority for organizations using affected Tenda devices, particularly those exposed to untrusted networks or with compromised credentials.

An attacker who has obtained valid credentials for the Tenda FH451 router (either through password reuse, default credentials, or prior compromise) connects to the device over the network and sends a specially crafted HTTP request to the /goform/WrlExtraSet endpoint with a maliciously oversized 'GO' parameter value. This triggers the stack-based buffer overflow in the formWrlExtraSet function, allowing the attacker to overwrite the stack and redirect program execution to injected shellcode. With the publicly available proof-of-concept from GitHub (https://github.com/Litengzheng/vul_db/blob/main/FH451/vul_41/README.md), the attacker can achieve complete router compromise, potentially using it as a persistent foothold for lateral movement, traffic interception, or botnet recruitment.