The Tenda JD12L router firmware version 16.03.53.23 contains a stack-based buffer overflow vulnerability in the fromSetWifiGusetBasic function of the /goform/WifiGuestSet endpoint. Manipulating the shareSpeed argument triggers the overflow, potentially allowing remote attackers to execute arbitrary code or cause a denial of service. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity. Exploit code is publicly available, but no official fix or mitigation has been disclosed by the vendor as of the publication date.

Successful exploitation of this vulnerability may allow remote attackers to execute arbitrary code or cause a denial of service on affected Tenda JD12L devices running firmware version 16.03.53.23. This could lead to compromise of the device and network security. The vulnerability is exploitable remotely without user interaction, increasing the risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider restricting remote access to the affected device and monitoring for suspicious activity related to the /goform/WifiGuestSet endpoint. Avoid exposing the device management interface to untrusted networks.