Tenda 4G300 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Tenda 4G300: 2 record(s), with affected versions and fixes.
CVE-2026-7470
High · 8.8
CWE-119 Apr 30, 2026
Tenda 4G300 SafeMacFilter sub_427C3C stack-based overflow
A flaw has been found in Tenda 4G300 US_4G300V1.0Mt_V1.01.42_CN_TDC01. Affected is the function sub_427C3C of the file /goform/SafeMacFilter. This manipulation of the argument page causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used.
CVE-2026-7469
Medium · 6.3
CWE-74 Apr 29, 2026
Tenda 4G300 DelFil sub_425A28 command injection
A vulnerability was detected in Tenda 4G300 US_4G300V1.0Mt_V1.01.42_CN_TDC01. This impacts the function sub_425A28 of the file /goform/DelFil. The manipulation of the argument delflag results in command injection. The attack may be launched remotely. The exploit is now public and may be used.