This vulnerability involves a buffer overflow in the fromaddressNat function of the Tenda F456 router firmware version 1.0.0.5. By sending a specially crafted request manipulating the menufacturer/Go argument to the /goform/addressNat endpoint, an attacker can cause a buffer overflow condition remotely. The CVSS 4.0 base score is 8.7 (high), reflecting network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. No official patch or vendor advisory is currently available, and the device is not a cloud service, so remediation depends on vendor action.

Successful exploitation could allow a remote attacker to cause a buffer overflow, potentially leading to arbitrary code execution or denial of service on the affected Tenda F456 device. The vulnerability impacts confidentiality, integrity, and availability with high severity. There are no confirmed reports of exploitation in the wild yet, but a public exploit exists, increasing the risk of attack.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is currently documented, users should monitor vendor communications closely. Until a patch is available, restricting network access to the affected device's management interface and disabling remote management features where possible may reduce exposure.