Executive brief
A security vulnerability exists in the Tenda F451 wireless router's web management interface. An attacker can exploit this flaw to crash the device or potentially take full control of it by sending a specially crafted web request. This could lead to a complete loss of internet connectivity for the home or office network and unauthorized access to the device's settings.
Technical details
A stack-based buffer overflow vulnerability exists in the 'fromNatlimit' function within the /goform/Natlimit component of Tenda F451 firmware versions 1.0.0.7 and 1.0.0.9. The root cause is the use of the unsafe 'sprintf' function to copy the user-controlled 'page' POST parameter into a fixed-size 256-byte stack buffer without length validation. A remote attacker with low privileges (access to the web interface) can exploit this by sending an overly long string in the 'page' parameter. Successful exploitation can lead to a Denial of Service (DoS) or Remote Code Execution (RCE). A public proof-of-concept exploit is available.
Affected products
- Tenda F451 Wireless Router 1.0.0.7, 1.0.0.9
Timeline
- 2026-06-08: disclosed: Vulnerability disclosed via VulDB and NVD
- 2026-06-08: advisory