The Tenda CX12L router firmware version 16.03.53.12 contains a stack-based buffer overflow vulnerability in the fromP2pListFilter function located in /goform/P2pListFilter. This vulnerability is triggered by manipulating the page argument, leading to memory corruption on the stack. Exploitation requires the attacker to be on the local network. The vulnerability has been publicly disclosed but no official fix or patch has been provided by the vendor. The CVSS 4.0 vector indicates local attack vector with low complexity and no user interaction required.

Successful exploitation of this vulnerability could allow an attacker with local network access to cause a stack-based buffer overflow, potentially leading to denial of service or arbitrary code execution on the affected device. However, no known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, restrict local network access to trusted users only and monitor for suspicious activity related to the /goform/P2pListFilter endpoint. No official fix or temporary workaround has been published by the vendor at this time.