This vulnerability affects Tenda CX12L firmware 16.03.53.12 and is caused by improper handling of the 'page' argument in the fromwebExcptypemanFilter function, leading to a stack-based buffer overflow. An attacker with local network access can exploit this flaw to potentially execute arbitrary code or cause a denial of service. The CVSS 4.0 base score is 8.6, reflecting high severity with attack vector requiring local access, low attack complexity, no privileges required, and no user interaction. The vulnerability has been publicly disclosed but lacks an official fix or patch from Tenda as of the publication date.

Successful exploitation can lead to a stack-based buffer overflow, which may allow an attacker on the local network to execute arbitrary code or disrupt the device's operation. Given the high CVSS score and the nature of the vulnerability, the impact includes potential compromise of the router's integrity and availability. However, there are no confirmed reports of exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit access to the local network to trusted users only and monitor for unusual activity. Avoid exposing the device's management interface to untrusted networks. Follow up with Tenda for updates on patches or firmware upgrades addressing this issue.