This vulnerability affects Tenda F451 firmware version 1.0.0.7. It arises from a stack-based buffer overflow in the fromSafeEmailFilter function of the /goform/SafeEmailFilter file. The issue is triggered by manipulating the 'page' argument, which leads to memory corruption on the stack. The vulnerability is remotely exploitable without requiring user interaction or elevated privileges. The CVSS 4.0 base score is 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code or cause a denial of service on the affected device remotely. The high CVSS score reflects significant potential impact on confidentiality, integrity, and availability of the device. However, there are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider limiting network exposure of the affected device and monitor for updates from Tenda. No official or temporary fixes have been documented.