CVE-2026-6120 — AI Deep Analysis Summary

Q: Root Cause? (CWE/Flaw)

- **Root Cause**: Stack-based buffer overflow ⚠️ - Likely **CWE-121**: Stack buffer overflow - Triggered by crafted input in DHCP client handling 🔍

Q: Who is affected? (Versions/Components)

- **Affected Product**: **Tenda F451** router 📶 - Component: `httpd` service - Firmware: `F451_kfw_V1.0.0.7_cn_svn7958 V1.0.0.7` 🧩 - Others unconfirmed ❓

Q: What can hackers do? (Privileges/Data)

- **Hackers can**: - Gain **high impact** 🚨 - **Privilege**: Auth user (PR:L) → full control - Access, modify, delete **data** 💾 - Execute arbitrary code 🖥️

Q: Is exploitation threshold high? (Auth/Config)

- **Exploitation threshold**: LOW ✅ - **Attack Vector**: Network (AV:N) - **Attack Complexity**: Low (AC:L) - **Privileges Required**: Low (PR:L) - **No User Interaction** (UI:N) 🎯

Q: Is there a public Exp? (PoC/Wild Exploitation)

- **Public Exploit**: YES 🚨 - Ref: `https://github.com/Jimi-Lab/cve/issues/11` 🔗 - Tagged: `exploit`, `issue-tracking` - No PoC listed in `pocs` field but GitHub shows activity 🧪

Q: How to self-check? (Features/Scanning)

- **Self-check**: - Check firmware = `V1.0.0.7` 🔍 - Monitor `httpd` crashes/log anomalies 🧠 - Scan w/ signature from `VDB-356983/cti` 🛡️ - Look for DHCP list parsing issues 📋

Q: Is it fixed officially? (Patch/Mitigation)

- **Official Fix**: NOT mentioned 🚫 - No patch info in refs/tags - Advisory exists, but no fix link 📭 - Status: **Unpatched** ❌

Q: What if no patch? (Workaround)

- **Workaround if no patch**: - Restrict access to `httpd` port 🚷 - Disable unused DHCP features 🛑 - Apply firewall rules at network edge 🧱 - Monitor & alert on abnormal DHCP requests 🔔

Q: Is it urgent? (Priority Suggestion)

- **Urgency**: HIGH 🔥 - CVSS: `9.0` range (H/H/H) 💥 - Public exploit + remote + no patch = 🚨 - **Priority**: Patch ASAP or isolate device 🛡️⏰

Updated Apr 18, 2026 CVSS 8.8 · High

This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login. Read the full analysis →

Q1What is this vulnerability? (Essence + Consequences)

- **CVE-2026-6120**: Stack-based overflow in `httpd` of **Tenda F451** 🚨  
- Happens in `DhcpListClient` → `fromDhcpListClient`  
- **Consequence**: Full control risk 💥  
  - Remote code exec possible  
  - Device compro…

Read full answer (login)

Q2Root Cause? (CWE/Flaw)

- **Root Cause**: Stack-based buffer overflow ⚠️  
- Likely **CWE-121**: Stack buffer overflow  
- Triggered by crafted input in DHCP client handling 🔍

Q3Who is affected? (Versions/Components)

- **Affected Product**: **Tenda F451** router 📶  
- Component: `httpd` service  
- Firmware: `F451_kfw_V1.0.0.7_cn_svn7958 V1.0.0.7` 🧩  
- Others unconfirmed ❓

Q4What can hackers do? (Privileges/Data)

- **Hackers can**:  
  - Gain **high impact** 🚨  
  - **Privilege**: Auth user (PR:L) → full control  
  - Access, modify, delete **data** 💾  
  - Execute arbitrary code 🖥️

Q5Is exploitation threshold high? (Auth/Config)

- **Exploitation threshold**: LOW ✅  
- **Attack Vector**: Network (AV:N)  
- **Attack Complexity**: Low (AC:L)  
- **Privileges Required**: Low (PR:L)  
- **No User Interaction** (UI:N) 🎯

Q6Is there a public Exp? (PoC/Wild Exploitation)

- **Public Exploit**: YES 🚨  
- Ref: `https://github.com/Jimi-Lab/cve/issues/11` 🔗  
- Tagged: `exploit`, `issue-tracking`  
- No PoC listed in `pocs` field but GitHub shows activity 🧪

Q7How to self-check? (Features/Scanning)

- **Self-check**:  
  - Check firmware = `V1.0.0.7` 🔍  
  - Monitor `httpd` crashes/log anomalies 🧠  
  - Scan w/ signature from `VDB-356983/cti` 🛡️  
  - Look for DHCP list parsing issues 📋

Q8Is it fixed officially? (Patch/Mitigation)

- **Official Fix**: NOT mentioned 🚫  
- No patch info in refs/tags  
- Advisory exists, but no fix link 📭  
- Status: **Unpatched** ❌

Q9What if no patch? (Workaround)

- **Workaround if no patch**:  
  - Restrict access to `httpd` port 🚷  
  - Disable unused DHCP features 🛑  
  - Apply firewall rules at network edge 🧱  
  - Monitor & alert on abnormal DHCP requests 🔔

Q10Is it urgent? (Priority Suggestion)

- **Urgency**: HIGH 🔥  
- CVSS: `9.0` range (H/H/H) 💥  
- Public exploit + remote + no patch = 🚨  
- **Priority**: Patch ASAP or isolate device 🛡️⏰

Continue exploring

Vulnerability detail Full AI analysis (login) Tenda CWE-121