This vulnerability affects Tenda F453 firmware version 1.0.0.3. The issue lies in the frmL7ImForm function of the /goform/L7Im endpoint, where manipulation of the 'page' parameter leads to a buffer overflow condition. The vulnerability is remotely exploitable without authentication or user interaction, potentially allowing an attacker to execute arbitrary code or cause denial of service. The CVSS 4.0 base score is 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The vulnerability has been publicly disclosed but no vendor patch or official fix has been provided as of the published date.

Successful exploitation of this buffer overflow vulnerability could allow remote attackers to execute arbitrary code or cause a denial of service on affected Tenda F453 devices running version 1.0.0.3. Given the network attack vector and lack of required privileges, the impact is significant for device availability and security. However, there are no confirmed reports of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider limiting network exposure of the affected device, such as restricting access to the management interface from untrusted networks. Monitor vendor channels for updates or patches addressing this vulnerability.