Description
A vulnerability has been found in Tenda TX3 up to 16.03.13.11_multi. This impacts an unknown function of the file /goform/SetIpMacBind. The manipulation of the argument list leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Metrics
CVSS 3.1 8.8/10
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Tenda | TX3 | 16.03.13.11_multi |
References
- https://github.com/MRAdera/IoT-Vuls/blob/main/tenda/tx3/fromSetIpMacBind.mdExploit, Third Party Advisory
- https://github.com/MRAdera/IoT-Vuls/blob/main/tenda/tx3/fromSetIpMacBind.md#pocExploit
- https://vuldb.com/?ctiid.344772Permissions Required, VDB Entry
- https://vuldb.com/?id.344772Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.747239Third Party Advisory, VDB Entry
- https://www.tenda.com.cn/Product
Timeline
- Published
- Feb 8, 2026
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed