This vulnerability affects Tenda F451 firmware version 1.0.0.7, where the WrlclientSet function in the httpd service improperly handles the GO argument, leading to a stack-based buffer overflow. The flaw can be exploited remotely without user interaction or privileges, as indicated by the CVSS vector (AV:N/AC:L/PR:L/UI:N). The vulnerability has a CVSS 4.0 base score of 8.7, reflecting high impact on confidentiality, integrity, and availability. Although an exploit is publicly available, no official fix or patch has been released by Tenda as of the published date.

Successful exploitation of this vulnerability may allow remote attackers to execute arbitrary code or cause denial of service on affected devices. The high CVSS score reflects significant potential impact on the device's confidentiality, integrity, and availability. Since the vulnerability is remotely exploitable without user interaction, affected devices are at elevated risk if exposed to untrusted networks.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. In the absence of an official fix, affected users should consider restricting network access to the vulnerable device, especially blocking access to the /goform/WrlclientSet endpoint from untrusted sources. Monitor vendor channels for updates or patches addressing this vulnerability.