This vulnerability involves a stack-based buffer overflow in the Tenda F451 router firmware version 1.0.0.7. The flaw exists in the formWrlsafeset function within the /goform/AdvSetWrlsafeset endpoint. By sending a specially crafted argument (mit_ssid), an attacker can cause a buffer overflow on the stack remotely, potentially leading to arbitrary code execution or denial of service. The CVSS 4.0 base score is 8.7, indicating high severity with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. No official patch or vendor advisory is currently available, and the vulnerability is not in a cloud service environment.

Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code or cause a denial of service on the affected Tenda F451 device. The high CVSS score reflects significant impact on confidentiality, integrity, and availability. The exploit is publicly known, increasing the risk of attacks, although no widespread exploitation has been reported yet.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider limiting remote access to the affected device and monitor for unusual activity. Avoid exposing the management interface to untrusted networks. Follow vendor communications closely for updates on patches or official mitigations.