This vulnerability affects Tenda F451 firmware version 1.0.0.7. The issue is a stack-based buffer overflow triggered by improper handling of the mit_ssid argument in the formWrlsafeset function located in /goform/AdvSetWrlsafeset. An attacker can remotely send crafted input to this function to cause a buffer overflow, potentially leading to arbitrary code execution or denial of service. The vulnerability is remotely exploitable without privileges or user interaction. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No official patch or remediation has been documented yet.

Successful exploitation of this vulnerability can allow a remote attacker to execute arbitrary code or cause a denial of service on the affected device. Given the high CVSS score and the nature of the buffer overflow, the impact on confidentiality, integrity, and availability is high. The exploit is publicly available, increasing the risk of exploitation. There is no indication that exploits are currently observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or temporary fix has been documented, users should monitor Tenda's official channels for updates. Until a fix is available, limiting network exposure of the affected device and restricting access to the management interface may reduce risk.