CVE-2024-51311 describes a stack overflow vulnerability in the Tenda TX9 router firmware version 22.03.02.05. The flaw exists in the sub_4418CC function related to the /goform/SetNetControlList endpoint. This vulnerability allows remote attackers with no privileges and no user interaction to execute arbitrary code with high impact on confidentiality, integrity, and availability. The vulnerability is classified under CWE-121 (stack-based buffer overflow) and has a CVSS v3.1 base score of 9.8, reflecting its critical nature. No vendor advisory or patch information is currently provided, and no exploits are known to be active in the wild.

Successful exploitation of this stack overflow vulnerability could lead to remote code execution without authentication, resulting in complete compromise of the affected device's confidentiality, integrity, and availability. This could allow attackers to control the device, disrupt network operations, or exfiltrate sensitive information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the affected device's management interfaces and monitor for unusual activity. Avoid exposing the device to untrusted networks.