The Tenda F451 router firmware version 1.0.0.7 contains a stack-based buffer overflow vulnerability in the WrlclientSet function of the /goform/WrlclientSet endpoint in the httpd component. This vulnerability arises from improper handling of the GO argument, which can be manipulated remotely to overflow the stack buffer. The CVSS 4.0 score is 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The vulnerability is published and an exploit is publicly available, but no vendor patch or official remediation has been disclosed.

Successful exploitation of this vulnerability could allow a remote attacker to cause a stack-based buffer overflow on the affected device. This may lead to denial of service or potentially arbitrary code execution depending on the exploit. The high CVSS score reflects the significant risk posed by this vulnerability due to its remote attack vector and ease of exploitation. However, there are no confirmed reports of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider limiting network exposure of the affected device and monitor for any updates from Tenda regarding patches or mitigations. No vendor advisory or official remediation instructions are currently available.