A vulnerability was found in Tenda i3 1.0.0.6(2204). Affected by this vulnerability is the function formSetAutoPing of the file /goform/setAutoPing. Performing …

Published:

8 maart 2026 om 23:00:00

Alert date:

9 maart 2026 om 05:01:39

Source:

nvd.nist.gov

Mobile & IoT, Network Infrastructure

A stack-based buffer overflow vulnerability was discovered in Tenda i3 router firmware version 1.0.0.6(2204). The vulnerability affects the formSetAutoPing function in the /goform/setAutoPing file, where manipulation of the ping1/ping2 arguments leads to buffer overflow. The vulnerability can be exploited remotely and public exploits are available. This affects the router's auto-ping configuration functionality and could allow attackers to execute arbitrary code remotely.

Technical details

Mitigation steps:

Affected products:

Tenda i3