This vulnerability affects Tenda JD12L version 16.03.53.23 in the formWifiBasicSet function of the /goform/WifiBasicSet file. By manipulating the security_5g argument, an attacker can cause a stack-based buffer overflow remotely. The vulnerability has a CVSS 4.0 score of 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. Although an exploit is publicly available, no official fix or patch has been released by the vendor as of the published date.

Successful exploitation can lead to a stack-based buffer overflow, potentially allowing remote code execution or denial of service on the affected device. Given the network attack vector and no required privileges, the vulnerability poses a significant risk to device integrity and network security.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider restricting remote access to the affected device and monitoring for exploit attempts. Avoid exposing the management interface to untrusted networks.