A critical stack-based buffer overflow vulnerability in Tenda WH450 firmware version 1.0.0.18 poses a high risk of remote code execution.

This vulnerability is a stack-based buffer overflow occurring within the HTTP request handler for the /goform/SafeMacFilter endpoint. While the CVSS vector suggests high privileges are required, the technical documentation indicates that authenticated users can trigger the flaw by sending a crafted request with excessive data lengths in the page parameter.

Successful exploitation of this vulnerability allows an attacker to execute arbitrary code on the affected router or induce a denial of service condition. Given the CVSS score of 7.2, this represents a significant risk to network infrastructure, potentially granting attackers a foothold within the local network, leading to unauthorized access, traffic interception, or complete system compromise.

Immediate Action: Users should immediately check the Tenda support portal for firmware updates and apply the latest available version to address this memory corruption flaw.

Proactive Monitoring: Security teams should monitor network traffic for anomalous HTTP GET requests directed at the /goform/SafeMacFilter endpoint, particularly those containing excessively long parameter values.

Compensating Controls: If a patch is not immediately available, restrict access to the web management interface of the router to trusted administrative IP addresses only, or place the device behind an additional firewall to filter malicious traffic.

Public Exploit Available: Yes, a proof-of-concept Python script is available via the researcher write-up on GitHub.

The presence of a published proof-of-concept significantly increases the risk of exploitation by malicious actors. Organizations utilizing the Tenda WH450 router must prioritize firmware updates and implement network-level access controls to the device management interface to mitigate the potential for remote code execution.