Submit #774933: Tenda F453 v1.0.0.3 Command Injectioninfo

TitleTenda F453 v1.0.0.3 Command Injection
DescriptionA vulnerability was found in Tenda F453 v1.0.0.3. Affected by this vulnerability is the function FormWriteFacMac of the file /goform/WriteFacMac of the component httpd. The manipulation of the argument mac with an unknown input leads to a command injection vulnerability.In FormWriteFacMac function,the value of the mac is inserted into command using doSystemCmd,and the value of mac will be finally executed.
Source⚠️ https://github.com/Litengzheng/vul_db/blob/main/F453/vul_95/README.md
User
 LtzHust (UID 95660)
Submission03/08/2026 03:45 (1 month ago)
Moderation03/21/2026 17:57 (14 days later)
StatusAccepted
VulDB entry352381 [Tenda F453 1.0.0.3 /goform/WriteFacMac FormWriteFacMac mac command injection]
Points20

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!