Description
A vulnerability was found in Tenda 4G06 04.06.01.29. This vulnerability affects the function fromDhcpListClient of the file /goform/DhcpListClient of the component Endpoint. Performing a manipulation of the argument page results in stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made public and could be used.
Published: 2026-03-29
Score: 8.7 High
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution
Action: Immediate Patch
AI Analysis

Impact

A stack‑based buffer overflow exists in Tenda 4G06’s fromDhcpListClient function when the page argument is tampered with. The overflow occurs in the /goform/DhcpListClient endpoint and can be triggered remotely. If exploited, attackers could execute arbitrary code on the device, compromising confidentiality, integrity, and availability of the network.

Affected Systems

The flaw affects Tenda routers of model 4G06 running firmware version 04.06.01.29. Manufacturers identify the device as Tenda 4G06, and the affected firmware is referenced by CPE identifiers that match this model and version.

Risk and Exploitability

The vulnerability scores a CVSS of 8.7, indicating high severity, while the EPSS score is below 1%, suggesting low current exploit probability. It is not listed in CISA’s KEV catalog, and an exploit has already been published publicly. Attackers only need network access to the device’s DhcpListClient endpoint, and the vector is remote; no local privilege is required.

Generated by OpenCVE AI on March 30, 2026 at 20:37 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Download and install the latest Tenda firmware update that contains the fix for the DhcpListClient stack overflow.
  • Verify the firmware version after installation is 04.06.01.30 or newer to ensure the issue is resolved.
  • If an update is not yet available, consider replacing the router until an official patch is released.

Generated by OpenCVE AI on March 30, 2026 at 20:37 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 30 Mar 2026 19:00:00 +0000

Type Values Removed Values Added
First Time appeared Tenda 4g06 Firmware
CPEs cpe:2.3:h:tenda:4g06:3.0:*:*:*:*:*:*:*
cpe:2.3:o:tenda:4g06_firmware:04.06.01.29:*:*:*:*:*:*:*
Vendors & Products Tenda 4g06 Firmware

Mon, 30 Mar 2026 13:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Mon, 30 Mar 2026 07:15:00 +0000

Type Values Removed Values Added
First Time appeared Tenda
Tenda 4g06
Vendors & Products Tenda
Tenda 4g06

Sun, 29 Mar 2026 08:00:00 +0000

Type Values Removed Values Added
Description A vulnerability was found in Tenda 4G06 04.06.01.29. This vulnerability affects the function fromDhcpListClient of the file /goform/DhcpListClient of the component Endpoint. Performing a manipulation of the argument page results in stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made public and could be used.
Title Tenda 4G06 Endpoint DhcpListClient fromDhcpListClient stack-based overflow
Weaknesses CWE-119
CWE-121
References
Metrics cvssV2_0

{'score': 9, 'vector': 'AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 8.8, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Tenda 4g06 4g06 Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-03-30T12:15:02.585Z

Reserved: 2026-03-27T16:16:15.050Z

Link: CVE-2026-5036

cve-icon Vulnrichment

Updated: 2026-03-30T12:14:46.969Z

cve-icon NVD

Status : Analyzed

Published: 2026-03-29T08:15:56.063

Modified: 2026-03-30T18:58:11.283

Link: CVE-2026-5036

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-03-30T20:56:51Z

Weaknesses