The Tenda JD12L router firmware version 16.03.53.23 contains a stack-based buffer overflow vulnerability in the fromAddressNat function of the /goform/addressNat file. This occurs due to improper validation or handling of the 'page' argument, allowing an attacker to overwrite stack memory. The vulnerability is remotely exploitable without requiring user interaction and has a CVSS 4.0 base score of 8.7, indicating high severity. Although the exploit has been publicly disclosed, no vendor patch or official remediation has been announced as of the publication date.

Successful exploitation of this vulnerability can lead to memory corruption on the affected device, potentially allowing an attacker to execute arbitrary code remotely with limited privileges. This could result in compromise of the device's integrity and availability. The vulnerability does not require user interaction and can be triggered over the network, increasing the risk of remote attacks.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting network access to the affected device's management interface to trusted hosts only and monitor for unusual activity. No official patch or temporary fix has been provided by the vendor at this time.