This vulnerability affects Tenda i12 firmware version 1.0.0.11(3862) and involves a stack-based buffer overflow in the formwrlSSIDset function of the /goform/wifiSSIDset component. The issue arises from improper handling of the index/wl_radio argument, which allows remote attackers to overflow a buffer on the stack. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. Exploit code is publicly available, increasing the risk of exploitation. However, no official patch or vendor advisory detailing remediation is currently available.

Successful exploitation of this vulnerability could allow remote attackers to cause a stack-based buffer overflow, potentially leading to arbitrary code execution or denial of service on affected devices. Given the remote attack vector and low complexity, this poses a significant risk to the confidentiality, integrity, and availability of the device. The presence of published exploit code increases the likelihood of attempted attacks, although no active exploitation has been confirmed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider limiting network exposure of the affected device and monitor for unusual activity. No vendor-provided mitigation or workaround information is currently available.