A remote buffer overflow vulnerability in the Tenda CH22 router, version 1.0.0.1, poses a critical risk of unauthorized code execution and system compromise.

This is a buffer overflow vulnerability (CWE-120) triggered by improper handling of the cmdinput argument within the formexeCommand function located at /goform/exeCommand. The vulnerability is remotely exploitable by an authenticated user.

The CVSS score of 8.8 denotes a high severity level, primarily due to the potential for complete system compromise. Successful exploitation could allow an attacker to gain full control over the affected networking hardware, leading to potential network interception, data exfiltration, or the inclusion of the device in a botnet, causing significant operational disruption.

Immediate Action: Contact Tenda support or check the official Tenda website for available firmware updates addressing this buffer overflow, as no specific patch version is currently documented. If no update is available, restrict management interface access to trusted administrative IP addresses only.

Proactive Monitoring: Monitor device logs for unusual traffic patterns or repeated attempts to access the /goform/exeCommand endpoint. Review system resource usage for unexpected spikes that may indicate memory corruption attempts.

Compensating Controls: Deploy a Web Application Firewall or network-level Access Control List to block unauthorized requests to the /goform/exeCommand URI. Ensure the administrative interface is not exposed to the public internet.

Public Exploit Available: Yes — a public proof-of-concept exists as documented in the linked GitHub repository.

Given the high CVSS score and the presence of a public proof-of-concept, this vulnerability should be treated as a high priority for remediation. Administrators must restrict access to the affected device interface immediately and apply firmware updates as soon as they are provided by the vendor to prevent potential remote exploitation.