A critical stack-based buffer overflow vulnerability in the Tenda WH450 router enables remote code execution and service disruption.

The vulnerability is a stack-based buffer overflow occurring within the /goform/PPTPUserSetting HTTP request handler. While the CVSS vector indicates a requirement for high privileges (PR:H), the provided research write-up demonstrates that the vulnerability is reachable through the application logic, allowing for memory corruption via the delno parameter.

Successful exploitation of this vulnerability allows an attacker to achieve remote code execution on the affected router, potentially leading to a complete compromise of the network device. Given the CVSS score of 7.2, this represents a high-severity risk that could facilitate unauthorized network access, interception of traffic, or persistent denial of service, severely impacting organizational operations and security posture.

Immediate Action: As no official patch is currently available from the vendor, administrators should restrict access to the web management interface, ensuring it is not exposed to the public internet.

Proactive Monitoring: Monitor network traffic for anomalous HTTP requests directed at the /goform/PPTPUserSetting endpoint and review device logs for signs of service crashes or unexpected reboots.

Compensating Controls: Implement a Web Application Firewall (WAF) or equivalent network filtering rules to drop incoming requests containing excessively long strings in the delno parameter.

Public Exploit Available: Yes, a published proof-of-concept exists and is attributed to the research write-up provided by the vulnerability reporter.

The presence of a public proof-of-concept elevates the risk of this vulnerability significantly. Organizations currently utilizing the Tenda WH450 router must prioritize isolating these devices from external access immediately. Until the manufacturer releases a firmware update, administrative interfaces should be strictly limited to trusted management segments to mitigate the potential for remote code execution.