CVE-2026-2137CWE-119CWE-120

Tenda TX3 SetIpMacBind buffer overflow

High · published February 8, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
57.0
In the wild
Unconfirmed
What it is

🚨 A buffer overflow vulnerability in Tenda TX3 could let an attacker remotely cause chaos! Think of it as a waiter at a restaurant who keeps adding items to an order without checking if there's enough capacity to serve them. If too many items are shoved into the system, it overflows, leading to a mess that could impact service! An attacker could potentially exploit this vulnerability to corrupt memory, leading to unauthorized access or even crashing the device. If successful, they could control the router, bypass security features, and wreak havoc on your network!

Put simply

Think of it as a waiter at a restaurant who keeps adding items to an order without checking if there's enough capacity to serve them. If too many items are shoved into the system, it overflows, leading to a mess that could impact service! This vulnerability arises from improper handling of the argument list in the /goform/SetIpMacBind file, resulting in a buffer overflow that may allow remote code execution under certain conditions.

What to do

An attacker could potentially exploit this vulnerability to corrupt memory, leading to unauthorized access or even crashing the device. If successful, they could control the router, bypass security features, and wreak havoc on your network! To protect yourself, update the Tenda TX3 firmware to the latest version immediately. Ensure to regularly check for updates and consider network segmentation to limit potential damage from future exploits. You've got this! Stay vigilant and secure your network with these updates! 🛡️

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.00826 · 57.0th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-02-08T05:32Z
EPSS history
Timeline
  • 08 FEB 05:32Z
    Tenda TX3 SetIpMacBind buffer overflow
    cvelistv5