The Tenda AC10 firmware version 16.03.10.09_multi_TDE01 contains a stack-based buffer overflow vulnerability in the fromAdvSetLanip function within the /goform/AdvSetLanip endpoint of the httpd/netctrl component. This flaw arises from improper handling of the GetValue/SetValue arguments, allowing remote attackers to cause a buffer overflow. The vulnerability is classified under CWE-119. Public exploit code exists, indicating potential for exploitation. No vendor advisory or patch information is provided, and the affected versions are not explicitly stated beyond the given firmware version.

Successful exploitation of this vulnerability could allow remote attackers to execute arbitrary code or cause a denial of service on affected devices. The vulnerability is remotely exploitable without user interaction and requires low attack complexity. The presence of public exploit code increases the risk of active exploitation. The severity is high due to the potential for full system compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict remote access to the affected device's management interface to trusted networks only and monitor for suspicious activity related to the /goform/AdvSetLanip endpoint.