CVE-2025-57571 is a buffer overflow vulnerability affecting Tenda F3 routers starting from version 12.01.01.48_multi. The issue arises from improper handling of the macFilterList parameter in the goform/setNAT function, potentially allowing an attacker to cause memory corruption. The vulnerability is classified under CWE-120 (Classic Buffer Overflow). The CVSS 3.1 base score is 5.6, reflecting a network attack vector with high attack complexity, no privileges required, no user interaction, and impacts on confidentiality, integrity, and availability at a low level.

Successful exploitation could lead to partial compromise of confidentiality, integrity, and availability of the affected device. However, the attack complexity is high, and no privileges or user interaction are required. There are no known exploits in the wild, suggesting limited current risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid exposing the device management interface to untrusted networks and restrict access to trusted users only.