Details of VAR-202603-1472

ID

VAR-202603-1472

CVE

CVE-2026-4043

TITLE

Shenzhen Tenda Technology Co.,Ltd. of I12 Multiple vulnerabilities in firmware

Trust: 0.8

sources: JVNDB: JVNDB-2026-009916

DESCRIPTION

A security vulnerability has been detected in Tenda i12 1.0.0.6(2204). The impacted element is the function formwrlSSIDget of the file /goform/wifiSSIDget. Such manipulation of the argument index leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The exploit is publicly available and could be misused.All information handled by the software may be leaked to the outside. All information handled by the software may be rewritten. Furthermore, the software may stop working completely. Furthermore, attacks that exploit this vulnerability will not affect other software

Trust: 1.62

sources: NVD: CVE-2026-4043 // JVNDB: JVNDB-2026-009916

AFFECTED PRODUCTS

vendor:	tenda	model:	i12	scope:	eq	version:	1.0.0.6\(2204\)	Trust: 1.0
vendor:	tenda	model:	i12	scope:	-	version:	-	Trust: 0.8
vendor:	tenda	model:	i12	scope:	eq	version:	i12 firmware 1.0.0.6¥(2204¥)	Trust: 0.8
vendor:	tenda	model:	i12	scope:	eq	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2026-009916 // NVD: CVE-2026-4043

CVSS

SEVERITY

CVSSV2

CVSSV3

cna@vuldb.com:	CVE-2026-4043
value:	HIGH
Trust: 1.0
OTHER:	JVNDB-2026-009916
value:	HIGH
Trust: 0.8

cna@vuldb.com:	CVE-2026-4043
severity:	HIGH
baseScore:	9.0
vectorString:	AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	8.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.0
OTHER:	JVNDB-2026-009916
severity:	HIGH
baseScore:	9.0
vectorString:	AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	NONE
impactScore:	NONE
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.8

cna@vuldb.com:	CVE-2026-4043
baseSeverity:	HIGH
baseScore:	8.8
vectorString:	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	2.8
impactScore:	5.9
version:	3.1
Trust: 1.0
OTHER:	JVNDB-2026-009916
baseSeverity:	HIGH
baseScore:	8.8
vectorString:	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: JVNDB: JVNDB-2026-009916 // NVD: CVE-2026-4043

PROBLEMTYPE DATA

problemtype:	CWE-121	Trust: 1.0
problemtype:	CWE-787	Trust: 1.0
problemtype:	CWE-119	Trust: 1.0
problemtype:	Buffer error (CWE-119) [ others ]	Trust: 0.8
problemtype:	Stack-based buffer overflow (CWE-121) [ others ]	Trust: 0.8
problemtype:	Out-of-bounds writing (CWE-787) [NVD evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-2026-009916 // NVD: CVE-2026-4043

PATCH

title:

//vuldb.com/?submit.769464

url:

https://github.com/Jimi-Lab/cve/issues/3

Trust: 0.8

sources: JVNDB: JVNDB-2026-009916

EXTERNAL IDS

db:	NVD	id:	CVE-2026-4043	Trust: 2.6
db:	VULDB	id:	350655	Trust: 1.0
db:	JVNDB	id:	JVNDB-2026-009916	Trust: 0.8

sources: JVNDB: JVNDB-2026-009916 // NVD: CVE-2026-4043

REFERENCES

url:	https://www.tenda.com.cn/	Trust: 1.8
url:	https://vuldb.com/?ctiid.350655	Trust: 1.0
url:	https://github.com/jimi-lab/cve/issues/3	Trust: 1.0
url:	https://vuldb.com/?id.350655	Trust: 1.0
url:	https://vuldb.com/?submit.769464	Trust: 1.0
url:	https://nvd.nist.gov/vuln/detail/cve-2026-4043	Trust: 0.8

sources: JVNDB: JVNDB-2026-009916 // NVD: CVE-2026-4043

SOURCES

db:	JVNDB	id:	JVNDB-2026-009916
db:	NVD	id:	CVE-2026-4043

LAST UPDATE DATE

2026-04-07T23:34:32.772000+00:00

SOURCES UPDATE DATE

db:	JVNDB	id:	JVNDB-2026-009916	date:	2026-04-06T02:56:00
db:	NVD	id:	CVE-2026-4043	date:	2026-04-02T20:04:11.387

SOURCES RELEASE DATE

db:	JVNDB	id:	JVNDB-2026-009916	date:	2026-04-06T00:00:00
db:	NVD	id:	CVE-2026-4043	date:	2026-03-12T16:16:11.600