The Tenda JD12L device running firmware version 16.03.53.23 contains a stack-based buffer overflow vulnerability in the fromAddressNat function of the /goform/addressNat endpoint. The vulnerability is triggered by manipulating the 'page' argument, leading to memory corruption on the stack. This flaw can be exploited remotely without user interaction and requires low attack complexity and privileges. The CVSS 4.0 base score is 8.7, indicating high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently provided, and no known exploits in the wild have been reported.

Successful exploitation of this vulnerability can lead to remote code execution or denial of service on the affected Tenda JD12L device. The attacker can manipulate the 'page' parameter to overflow the stack buffer, potentially allowing control over program execution flow. This compromises the confidentiality, integrity, and availability of the device. The vulnerability requires no user interaction and has low attack complexity, increasing its risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the affected device's management interface to trusted users only and monitor for suspicious activity targeting the /goform/addressNat endpoint. Avoid exposing the device management interface to untrusted networks.