Be3L Pro
Monthly
Buffer overflow in the Tenda BE3L Pro router running firmware 16.03.60.62 lets an authenticated, low-privileged user of the web management interface corrupt memory and potentially achieve code execution or force a device crash by submitting a crafted security_5g value to /goform/WifiBasicSet. The bug is network-reachable with low attack complexity and no user interaction, and publicly available exploit code exists (no CISA KEV confirmation of active exploitation at time of analysis). Practical risk hinges on exposure: the management interface is normally confined to the LAN/Wi-Fi side, so exposure to untrusted networks materially raises the threat.
Buffer overflow in the Tenda BE3L Pro router running firmware 16.03.60.62 lets an authenticated, low-privileged user of the web management interface corrupt memory and potentially achieve code execution or force a device crash by submitting a crafted security_5g value to /goform/WifiBasicSet. The bug is network-reachable with low attack complexity and no user interaction, and publicly available exploit code exists (no CISA KEV confirmation of active exploitation at time of analysis). Practical risk hinges on exposure: the management interface is normally confined to the LAN/Wi-Fi side, so exposure to untrusted networks materially raises the threat.