This vulnerability involves a stack-based buffer overflow in the Tenda 4G300 router firmware, specifically in the function sub_427C3C of the /goform/SafeMacFilter component. The issue arises from improper manipulation of the 'page' argument, enabling remote attackers to overflow the stack buffer. The vulnerability is remotely exploitable without user interaction and has a CVSS 4.0 base score of 8.7, indicating high severity. The affected firmware version is US_4G300V1.0Mt_V1.01.42_CN_TDC01. No official patch or remediation level has been disclosed by the vendor, and while an exploit is publicly available, no active exploitation has been confirmed.

Successful exploitation of this vulnerability could allow remote attackers to execute arbitrary code or cause a denial of service on affected Tenda 4G300 devices. Given the stack-based buffer overflow nature, attackers may gain control over the device's execution flow. The CVSS score of 8.7 reflects the high impact on confidentiality, integrity, and availability. However, there are no confirmed reports of exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider limiting remote access to the affected device's management interface and monitor for any unusual activity. Avoid exposing the device management interface to untrusted networks. Follow vendor communications closely for updates on patches or official mitigations.