CVE-2024-51312 is a stack overflow vulnerability in the Tenda TX9 router firmware version 22.03.02.20. The flaw resides in the sub_42EEE0 function within the /goform/SetStaticRouteCfg endpoint. It can be triggered remotely without authentication, leading to potential remote code execution. The vulnerability is classified under CWE-121 (stack-based buffer overflow) and has a CVSS v3.1 base score of 9.8, indicating critical severity with network attack vector, low attack complexity, no privileges required, no user interaction, and full impact on confidentiality, integrity, and availability. No official patch or remediation guidance is currently available, and no known exploits in the wild have been reported.

Successful exploitation of this stack overflow vulnerability can lead to remote code execution by unauthenticated attackers, resulting in full system compromise including confidentiality, integrity, and availability impacts. This could allow attackers to take control of the affected device remotely.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the affected device, especially to the /goform/SetStaticRouteCfg endpoint, and monitor for suspicious activity. Avoid exposing the device management interface to untrusted networks.