The Tenda AC15 router firmware version 15.03.05.18 contains a stack-based buffer overflow vulnerability in the websGetVar function of the /goform/SysToolChangePwd endpoint. Specifically, improper handling of the oldPwd, newPwd, and cfmPwd parameters allows an attacker to overflow the stack buffer remotely. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity with network attack vector, low complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. Exploit code is publicly available, increasing the risk of exploitation, although no active exploitation has been confirmed. No official patch or vendor advisory detailing remediation is currently available.

Successful exploitation of this vulnerability can lead to remote code execution or denial of service on the affected device, compromising the confidentiality, integrity, and availability of the router. This could allow an attacker to take control of the device or disrupt its operation remotely without authentication or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider limiting remote access to the affected device and monitor for unusual activity. No official vendor advisory or patch links are currently available.