A critical stack-based buffer overflow vulnerability in Tenda AC7 firmware version 15.03.06.44 poses a significant risk of remote code execution or device denial of service.

This vulnerability is a stack-based buffer overflow occurring within the /goform/WifiMacFilterSet handler. An authenticated attacker can inject an oversized value into the wifi_chkHz parameter, which leads to memory corruption when later processed by the /goform/WifiExtraSet handler.

Successful exploitation of this flaw allows an attacker to cause device crashes or achieve remote code execution on the affected router. Given the CVSS score of 8.8, this represents a high risk to network integrity and confidentiality, as compromised routers can be used as entry points for further lateral movement within the internal network.

Immediate Action: Since no official patch is currently available, users should restrict administrative access to the device management interface to trusted internal segments only.

Proactive Monitoring: Monitor device logs for unusual POST requests directed at /goform/WifiMacFilterSet or /goform/WifiExtraSet, which may indicate exploitation attempts.

Compensating Controls: If possible, place the Tenda AC7 device behind a firewall that inspects and filters web traffic to block malicious payloads targeting these specific endpoints.

Public Exploit Available: Yes, a functional proof-of-concept exists as detailed in the research write-up hosted on GitHub.

Given the availability of a public proof-of-concept and the potential for remote code execution, this vulnerability should be treated with high priority. Organizations utilizing Tenda AC7 devices must implement strict access controls for the management interface immediately and monitor for vendor-provided firmware updates to resolve this memory corruption issue.