This vulnerability affects Tenda FH1201 firmware version 1.2.0.14(408) in the Parameter Handler component, specifically the WrlclientSet function accessed via /goform/WrlclientSet. An attacker can remotely manipulate the GO argument to cause a stack-based buffer overflow, potentially leading to arbitrary code execution or denial of service. The vulnerability is remotely exploitable without requiring user interaction. Public exploit code is available, increasing the risk of exploitation. No official patch or remediation information is provided in the available data.

Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code or cause a denial of service on the affected device. Given the high CVSS score (8.7) and the availability of public exploit code, the risk to affected devices is significant. The vulnerability does not require user interaction and can be triggered remotely, increasing its severity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users should monitor Tenda's official channels for updates. Until a patch is available, restricting remote access to the device's management interface and applying network-level protections to limit exposure may help reduce risk.