This vulnerability affects Tenda F456 firmware version 1.0.0.5. The flaw resides in the fromP2pListFilter function, which improperly handles the 'menufacturer/Go' argument, leading to a buffer overflow condition. The vulnerability is remotely exploitable without user interaction or privileges, as indicated by the CVSS vector (AV:N/AC:L/PR:L/UI:N). The CVSS 4.0 base score is 8.7, reflecting high impact on confidentiality, integrity, and availability. Although an exploit is publicly available, there is no vendor-provided patch or official remediation at this time.

Successful exploitation can lead to a buffer overflow, potentially allowing remote attackers to execute arbitrary code or cause denial of service on affected devices. The vulnerability impacts confidentiality, integrity, and availability with high severity. Since the exploit is publicly available, the risk of exploitation is elevated. However, no known exploits in the wild have been reported yet.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider limiting network exposure of the affected device and monitor for unusual activity. No vendor-provided mitigation or temporary fix is currently available.