Description
A security vulnerability has been detected in Tenda BE12 Pro 16.03.66.23. This issue affects the function fromSafeMacFilter of the file /goform/SafeMacFilter. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.
Published: 2026-07-14
Score: 8.7 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A stack-based buffer overflow occurs in the fromSafeMacFilter function of the /goform/SafeMacFilter web interface on the Tenda BE12 Pro. By manipulating the page argument, an attacker can trigger the overflow and potentially inject executable code or overwrite data on the stack, giving code execution privileges on the device.

Affected Systems

The vulnerability affects Tenda BE12 Pro routers running firmware 16.03.66.23. Only devices with this specific build that remain exposed to the web interface at /goform/SafeMacFilter are impacted.

Risk and Exploitability

The CVSS score of 8.7 classifies this as a high-severity flaw. The EPSS score of less than 1% indicates a low present exploitation probability. It is not listed in the CISA KEV catalog. The attack vector is remote over the network via the router’s administrative interface; local or privileged access is not required according to the description. Consequently, an attacker who can reach the web interface could exploit the overflow to execute code on the device.

Generated by OpenCVE AI on July 31, 2026 at 10:27 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the latest firmware update from Tenda that fixes the SafeMacFilter buffer overflow, ensuring the device runs a version newer than 16.03.66.23.
  • If a patch is not yet available, block external access to the /goform/SafeMacFilter endpoint using a firewall or network segmentation, allowing only trusted internal hosts to reach the router’s administrative interface.
  • If immediate patching or network restriction is not feasible, disable the SafeMacFilter feature in the router’s configuration to eliminate the vulnerable code path.

Generated by OpenCVE AI on July 31, 2026 at 10:27 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 14 Jul 2026 14:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 14 Jul 2026 13:45:00 +0000

Type Values Removed Values Added
Description A security vulnerability has been detected in Tenda BE12 Pro 16.03.66.23. This issue affects the function fromSafeMacFilter of the file /goform/SafeMacFilter. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.
Title Tenda BE12 Pro SafeMacFilter fromSafeMacFilter stack-based overflow
First Time appeared Tenda
Tenda be12 Pro
Weaknesses CWE-119
CWE-121
CPEs cpe:2.3:h:tenda:be12_pro:*:*:*:*:*:*:*:*
Vendors & Products Tenda
Tenda be12 Pro
References
Metrics cvssV2_0

{'score': 9, 'vector': 'AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 8.8, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Tenda Be12 Pro
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-07-14T13:55:46.773Z

Reserved: 2026-07-14T04:58:14.402Z

Link: CVE-2026-15693

cve-icon Vulnrichment

Updated: 2026-07-14T13:55:43.686Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-31T10:30:17Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

  • CWE-121

    Stack-based Buffer Overflow