The Tenda JD12L router firmware version 16.03.53.23 contains a stack-based buffer overflow vulnerability in the fromNatStaticSetting function of the /goform/NatStaticSetting endpoint. Remote attackers can manipulate the 'page' argument to trigger the overflow, potentially leading to code execution or denial of service. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity with network attack vector, low complexity, no user interaction, and high impact on confidentiality, integrity, and availability. Although an exploit is publicly available, no official fix or patch has been documented as of the publication date.

Successful exploitation of this vulnerability could allow remote attackers to execute arbitrary code or cause a denial of service on affected Tenda JD12L devices running firmware 16.03.53.23. The vulnerability impacts confidentiality, integrity, and availability with high severity. The exploit requires low privileges and no user interaction, increasing the risk of remote compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider limiting network exposure of the affected device and monitor for any vendor updates. No official remediation or temporary fix has been documented at this time.