The Tenda W12 router firmware version 3.0.0.7(4763) contains a stack-based buffer overflow vulnerability in the cgiWifiMacFilterSet function of the /bin/httpd binary. This occurs due to improper validation of the wifiMacFilterSet.macList.mac argument, which can be manipulated remotely to overflow the stack buffer. The vulnerability is remotely exploitable without authentication or user interaction, and it has been publicly disclosed. The CVSS v4.0 score is 8.7, reflecting high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and no known exploits in the wild have been reported.

Successful exploitation of this vulnerability could allow a remote attacker to cause a stack-based buffer overflow on the affected device, potentially leading to arbitrary code execution or denial of service. The vulnerability affects confidentiality, integrity, and availability of the device. Since the attack vector is network-based and requires no user interaction, it poses a significant risk to affected devices running the specified firmware version.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider limiting network exposure of the affected device, such as restricting access to the management interface from untrusted networks. Monitor vendor channels for updates and apply patches promptly once released.