This vulnerability involves a stack-based buffer overflow in the function sub_40BB50 of the /proc/webmon_recent_domains file in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. The flaw allows remote attackers to cause a buffer overflow condition, potentially leading to code execution or denial of service. The vulnerability has a CVSS 4.0 score of 8.7, indicating high severity. The Shibby Tomato project is no longer maintained and has been superseded by FreshTomato. There is no vendor advisory or patch information available at this time.

Successful exploitation of this vulnerability can lead to remote code execution or denial of service due to a stack-based buffer overflow. The vulnerability requires no user interaction and has low attack complexity. It affects confidentiality, integrity, and availability with high impact. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the Shibby Tomato project is superseded by FreshTomato, users are advised to consider migrating to FreshTomato, which may have addressed this and other vulnerabilities. Until an official fix is available, restrict remote access to affected devices and monitor for unusual activity related to /proc/webmon_recent_domains.