The Tenda F451 router firmware version 1.0.0.7_cn_svn7958 contains a stack-based buffer overflow vulnerability in the fromSafeUrlFilter function of the /goform/SafeUrlFilter endpoint. This vulnerability is triggered by manipulating the 'page' argument, allowing remote attackers to cause a buffer overflow on the stack. The vulnerability has a CVSS 4.0 score of 8.7, indicating high severity with network attack vector, no user interaction required, and high impact on confidentiality, integrity, and availability. No official patch or vendor advisory is currently available, and the product is not a cloud service. Public exploit code exists, but no known exploitation in the wild has been reported.

Successful exploitation of this vulnerability can lead to remote code execution or denial of service on the affected Tenda F451 device, compromising the device's confidentiality, integrity, and availability. The vulnerability requires low privileges and no user interaction, increasing the risk of remote exploitation. However, there are no confirmed reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider limiting network exposure of the affected device, such as restricting remote access to the management interface. Monitor vendor channels for updates and apply patches promptly once available.