This vulnerability affects Tenda F451 firmware version 1.0.0.7_cn_svn7958. It is a buffer overflow in the fromGstDhcpSetSer function of the httpd component, triggered by manipulating the dips argument. The vulnerability can be exploited remotely without privileges or user interaction. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. There is no vendor-provided patch or remediation information available at this time.

Successful exploitation of this buffer overflow could allow an attacker to execute arbitrary code remotely on the affected device, potentially leading to full compromise of the router. This could impact confidentiality, integrity, and availability of the device and the network it serves. The exploit is publicly available, increasing the risk of exploitation, although no known active exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider limiting exposure of the affected device to untrusted networks and monitor for any updates from Tenda regarding this vulnerability.