A critical stack-based buffer overflow vulnerability in Tenda AC7 firmware version 15.03.06.44 permits remote code execution, posing a severe risk to device integrity.

This vulnerability is a stack-based buffer overflow (CWE-121) caused by a lack of input length validation within the /goform/SetDDNSCfg and /goform/GetAdvanceStatus functions. An attacker with low-level privileges can supply an excessively long string to the ddnsEn parameter, leading to memory corruption and potential arbitrary code execution.

The CVSS score of 8.8 indicates a high-severity risk, as successful exploitation could lead to full device compromise. This allows an attacker to gain unauthorized control over network hardware, potentially facilitating lateral movement within the internal network, data interception, or permanent denial of service. Such an incident could result in significant operational disruption and loss of network visibility.

Immediate Action: Since no official patch is currently identified, administrators should immediately restrict access to the management interface of affected Tenda AC7 devices to trusted IP addresses only.

Proactive Monitoring: Monitor device access logs for suspicious POST requests to the /goform/SetDDNSCfg endpoint and unexpected crashes or reboots associated with the /goform/GetAdvanceStatus function.

Compensating Controls: Deploy a Web Application Firewall (WAF) or network-level inspection rules to filter traffic and block requests containing abnormally long ddnsEn parameter values.

Public Exploit Available: Yes, a published proof-of-concept exists and is documented in the research write-up referenced by the CVE record.

Given the availability of a functional proof-of-concept and the nature of the vulnerability, the risk to exposed devices is substantial. Administrators must treat this as a high-priority issue and implement network-level access controls immediately. Continue to monitor the official Tenda support site for firmware updates and apply them as soon as they become available to permanently resolve the underlying memory corruption flaw.