A critical stack-based buffer overflow in Tenda WH450 firmware version 1.0.0.18 poses a severe risk of remote code execution.

The vulnerability is a stack-based buffer overflow located in the HTTP request handler for the /goform/SafeEmailFilter endpoint. It is triggered by providing an excessively long string to the page parameter, which allows an authenticated attacker to overwrite memory and potentially execute arbitrary code.

Successful exploitation of this buffer overflow could allow an attacker to gain full control over the affected router, leading to complete system compromise or persistent denial of service. Given the CVSS score of 7.2, this vulnerability represents a high-risk scenario that could facilitate lateral movement into the internal network or interception of sensitive traffic.

Immediate Action: There is currently no official patch available from the vendor; users should restrict administrative access to the router interface and ensure it is not exposed to the public internet.

Proactive Monitoring: Security teams should monitor network traffic for abnormal HTTP requests directed at the /goform/SafeEmailFilter endpoint or unexpected outbound connections originating from the device.

Compensating Controls: Deploy a Web Application Firewall (WAF) or an intrusion detection system with custom rules to filter or block HTTP GET requests containing excessively long parameters to the identified vulnerable endpoint.

Public Exploit Available: Yes, a published proof-of-concept exists, as documented by the researcher in the referenced technical write-up.

Due to the availability of a public proof-of-concept and the potential for full system compromise, this vulnerability should be treated with high urgency. Organizations utilizing Tenda WH450 routers must isolate the devices from untrusted network segments and maintain vigilant monitoring until the vendor releases a firmware update to resolve the memory corruption flaw.