This vulnerability affects Comfast CF-N1-S version 2.6.0.1. The flaw is a stack-based buffer overflow in the web management interface's function sub_41AD7C, triggered by crafted input to the timestr or ntp_client_enabled parameters in the /cgi-bin/mbox-config?method=SET&section=ntp_timezone endpoint. The vulnerability allows remote attackers to potentially execute arbitrary code or cause denial of service. The CVSS 4.0 score is 9.4 (critical), reflecting network attack vector, low complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. Public exploit code is available, but no official patch or vendor remediation has been confirmed.

Successful exploitation can lead to remote code execution or denial of service on the affected device, compromising confidentiality, integrity, and availability. The vulnerability is exploitable remotely without authentication or user interaction, making it highly dangerous. However, there are no confirmed reports of exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the device's web management interface from untrusted networks to reduce exposure. Monitor vendor communications for updates on patches or mitigations.