The Tenda F451 router firmware version 1.0.0.7_cn_svn7958 contains a stack-based buffer overflow vulnerability in the fromSetIpBind function of the /goform/SetIpBind endpoint. Manipulating the 'page' argument remotely can trigger this overflow, potentially allowing an attacker to execute arbitrary code or cause a denial of service. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity with network attack vector, low complexity, no privileges required, and no user interaction needed. The vulnerability state is published, but no official remediation or patch has been documented.

Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected device or cause it to crash, leading to denial of service. Given the network attack vector and lack of required privileges or user interaction, the risk of remote compromise is significant. However, there are currently no known exploits observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider limiting network exposure of the affected device, such as restricting access to the management interface. Monitor vendor communications for updates regarding patches or official mitigations.