This vulnerability in Shibby Tomato 1.28 involves a stack-based buffer overflow triggered by manipulation of the argument a1 in the function sub_42537C within the Scheduler Name Handler component. The flaw allows remote attackers to exploit the overflow without user interaction and with low privileges, potentially causing high impact on confidentiality, integrity, and availability. The project is no longer actively maintained, having been superseded by FreshTomato. There is no vendor advisory or patch information available at this time.

Successful exploitation of this vulnerability can lead to a stack-based buffer overflow, which may allow remote attackers to execute arbitrary code or cause denial of service. The CVSS 4.0 score of 8.7 indicates high impact on confidentiality, integrity, and availability. No known exploits are reported in the wild as of the published date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the project is superseded by FreshTomato, users are advised to consider migrating to the maintained FreshTomato firmware. Until an official fix is available, restrict remote access to affected devices and monitor for suspicious activity related to the Scheduler Name Handler component.