A critical stack-based buffer overflow in the Tenda WH450 firmware allows for potential arbitrary code execution, posing a significant risk to device integrity.

The vulnerability is a stack-based buffer overflow located within the HTTP request handler of the /goform/webExcptypemanFilte endpoint. An authenticated attacker can trigger this condition by supplying an excessively long string to the page parameter, leading to memory corruption.

Successful exploitation of this vulnerability allows an attacker to execute arbitrary code with elevated privileges on the affected router. This could result in total system compromise, unauthorized network traffic interception, or permanent device bricking, leading to significant operational downtime and a loss of network security controls. The CVSS score of 7.2 reflects the high potential for impact on confidentiality, integrity, and availability.

Immediate Action: Contact Tenda support or check the official Tenda website for firmware updates addressing this buffer overflow. If no patch is currently available, restrict access to the device management interface to trusted administrative IP addresses only.

Proactive Monitoring: Review system and web access logs for unusual request patterns, specifically looking for abnormally long string parameters directed at the /goform/webExcptypemanFilte endpoint.

Compensating Controls: Implement a Web Application Firewall or similar filtering mechanism to inspect and block incoming HTTP requests that contain suspicious or oversized parameters before they reach the router interface.

Public Exploit Available: Yes — a functional proof-of-concept script exists, as documented in the referenced GitHub repository.

Given the availability of functional proof-of-concept code and the high potential for remote code execution, administrators must prioritize the security of their Tenda WH450 devices. Immediately isolate the management interface from the public internet and apply any available vendor firmware updates as soon as they are released to remediate this memory corruption flaw.