The Tenda CX12L router firmware version 16.03.53.12 contains a stack-based buffer overflow vulnerability in the fromP2pListFilter function of the /goform/P2pListFilter endpoint. This vulnerability is triggered by manipulating the page argument, leading to potential memory corruption. The attack vector requires the attacker to be on the local network, and no user interaction is needed. The CVSS 4.0 vector indicates low attack complexity and privileges required, with partial impact on confidentiality, integrity, and availability. No official patch or vendor advisory is currently available to confirm remediation status.

Successful exploitation of this vulnerability could lead to memory corruption on the affected device, potentially allowing an attacker with local network access to disrupt device operation or execute arbitrary code. However, the impact is limited by the requirement for local network access and the absence of known exploits in the wild. The medium CVSS score reflects moderate risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local network access to trusted users and monitor for unusual activity related to the /goform/P2pListFilter endpoint. No vendor-provided mitigation or workaround is currently documented.