This vulnerability affects Tenda F451 firmware version 1.0.0.7. The flaw exists in the fromP2pListFilter function of the /goform/P2pListFilter endpoint, where improper handling of the page argument leads to a stack-based buffer overflow. This can be triggered remotely without user interaction and requires low attack complexity and privileges. The CVSS 4.0 base score is 8.7, indicating a high severity with high impact on confidentiality, integrity, and availability. Although the exploit code has been publicly disclosed, no confirmed exploitation in the wild has been reported. No official patch or remediation level has been provided by the vendor as of the publication date.

Successful exploitation of this vulnerability could allow remote attackers to execute arbitrary code or cause a denial of service on affected devices running Tenda F451 version 1.0.0.7. The vulnerability impacts confidentiality, integrity, and availability with high severity. There are no confirmed reports of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, it is recommended to restrict network access to the affected device's management interfaces and monitor for suspicious activity related to the /goform/P2pListFilter endpoint. Avoid exposing the device to untrusted networks. Follow up with Tenda for updates on patches or official mitigations.