📦 F3 Firmware

by Tenda

🔍 What is F3 Firmware?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2020-35391

CRITICAL CVSS 9.6 Jan 1, 2021

This vulnerability allows unauthenticated remote attackers to download the router configuration file containing sensitive information like admin passwords via a direct HTTP request to a specific CGI e...

CVE-2026-27511

MEDIUM CVSS 4.3 Feb 23, 2026

This clickjacking vulnerability in Tenda F3 router's web interface allows malicious websites to embed the admin panel in invisible frames. An authenticated administrator could be tricked into performi...

CVE-2026-27513

MEDIUM CVSS 4.3 Feb 23, 2026

This CSRF vulnerability in Tenda F3 router firmware allows attackers to trick authenticated administrators into making unauthorized configuration changes via malicious web requests. Anyone using Tenda...

CVE-2025-57569

MEDIUM CVSS 5.6 Sep 10, 2025

This CVE describes a buffer overflow vulnerability in Tenda F3 routers through the portList parameter in the /goform/setNAT endpoint. Attackers could potentially execute arbitrary code or crash the de...

CVE-2025-57570

MEDIUM CVSS 5.6 Sep 10, 2025

This vulnerability allows attackers to execute arbitrary code or cause denial of service on Tenda F3 routers by sending specially crafted requests to the QoS configuration endpoint. It affects Tenda F...

CVE-2025-57571

MEDIUM CVSS 5.6 Sep 10, 2025

This CVE describes a buffer overflow vulnerability in Tenda F3 routers via the macFilterList parameter in the goform/setNAT endpoint. Attackers can potentially execute arbitrary code or crash the devi...

CVE-2025-57572

MEDIUM CVSS 5.6 Sep 10, 2025

This CVE describes a buffer overflow vulnerability in Tenda F3 routers via the onlineList parameter in the setParentControl form handler. Attackers could potentially execute arbitrary code or crash th...

CVE-2025-57573

MEDIUM CVSS 5.6 Sep 10, 2025

This vulnerability allows remote attackers to execute arbitrary code or cause denial of service on Tenda F3 routers via a buffer overflow in the wifiTimeClose parameter. Attackers can exploit this by ...