CVE-2025-57569 describes a buffer overflow vulnerability in Tenda F3 router firmware starting from version V12.01.01.48_multi. The flaw is triggered through the portList parameter in the /goform/setNAT endpoint. The vulnerability is classified under CWE-120 (Classic Buffer Overflow). According to the CVSS vector, the attack requires network access with high complexity, no privileges, and no user interaction, affecting confidentiality, integrity, and availability to a low degree. No known exploits are reported in the wild, and no patch or vendor advisory information is available at this time.

Successful exploitation of this buffer overflow could lead to partial compromise of confidentiality, integrity, and availability of the affected device. However, the attack complexity is high, and no privileges or user interaction are required. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, avoid exposing the /goform/setNAT endpoint to untrusted networks and restrict access to trusted users only.