Description
A weakness has been identified in Tenda HG10 300001138. Affected by this issue is the function formIPv6Routing of the file /boaform/admin/formIPv6Routing of the component Boa Web Server. This manipulation of the argument destNet causes buffer overflow. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-08-30
Score: 10 Critical
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution via buffer overflow
Action: Patch Update
AI Analysis

Impact

A buffer overflow exists in the Boa Web Server’s formIPv6Routing function, triggered by an oversized destNet argument supplied to /boaform/admin/formIPv6Routing. The overflow allows uncontrolled memory writes and could lead to arbitrary code execution. This weakness is identified as CWE-119 and CWE-120, indicating unsafe buffer manipulation and the potential for overwriting control data.

Affected Systems

The flaw affects Tenda HG10 routers running firmware version 300001138. The vulnerable component is the web server’s formIPv6Routing handler at /boaform/admin/formIPv6Routing. Any device using this firmware and exposing the web interface is potentially impacted.

Risk and Exploitability

The CVSS score of 10 indicates critical severity. No EPSS score is available, but the published exploitation code signals a heightened risk of real-world attacks. The CVE is not listed in CISA’s KEV. The attack vector is remote, requiring only the ability to send crafted HTTP requests to the web interface which is typically reachable over the internet. Based on the description, it is inferred that a successful exploitation could compromise the router’s control plane and potentially expose network resources.

Generated by OpenCVE AI on August 30, 2026 at 14:20 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Check for an official firmware update that addresses the formIPv6Routing buffer overflow.
  • Block or restrict access to the web administration interface (typically ports 80/443) using a firewall or by limiting IP ranges.
  • Disable IPv6 routing on the device if the feature is not required, reducing the attack surface.

Generated by OpenCVE AI on August 30, 2026 at 14:20 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 01 Sep 2026 14:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Sun, 30 Aug 2026 13:45:00 +0000

Type Values Removed Values Added
First Time appeared Tenda hg10
Vendors & Products Tenda hg10

Sun, 30 Aug 2026 12:45:00 +0000

Type Values Removed Values Added
Description A weakness has been identified in Tenda HG10 300001138. Affected by this issue is the function formIPv6Routing of the file /boaform/admin/formIPv6Routing of the component Boa Web Server. This manipulation of the argument destNet causes buffer overflow. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.
Title Tenda HG10 Boa Web Server formIPv6Routing buffer overflow
First Time appeared Tenda
Tenda hg10 Firmware
Weaknesses CWE-119
CWE-120
CPEs cpe:2.3:o:tenda:hg10_firmware:*:*:*:*:*:*:*:*
Vendors & Products Tenda
Tenda hg10 Firmware
References
Metrics cvssV2_0

{'score': 10, 'vector': 'AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 10, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 10, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 10, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P'}

Subscriptions

Tenda Hg10 Hg10 Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-09-01T14:02:01.116Z

Reserved: 2026-08-29T17:43:55.683Z

Link: CVE-2026-82542

cve-icon Vulnrichment

Updated: 2026-09-01T14:01:50.584Z

cve-icon NVD

Status : Deferred

Published: 2026-08-30T13:16:56.267

Modified: 2026-09-01T15:17:32.847

Link: CVE-2026-82542

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-30T14:30:20Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

  • CWE-120

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')