A critical stack-based buffer overflow vulnerability in Tenda G0 allows authenticated remote attackers to achieve full system compromise through malicious input.

This memory corruption vulnerability resides in the addStaticRoute function within the /goform/module file. An attacker with low-level privileges can trigger a stack-based buffer overflow by manipulating the staticRouteNet argument, leading to potential remote code execution.

With a CVSS score of 8.8, this vulnerability poses a significant risk to organizational infrastructure. Successful exploitation allows an attacker to gain unauthorized control over the affected device, potentially leading to total system compromise, data interception, or the use of the device as a pivot point for lateral movement within the network.

Immediate Action: Contact the vendor or check the official Tenda support portal for firmware updates addressing this buffer overflow. If no patch is currently available, restrict access to the web management interface to trusted administrative IP addresses only.

Proactive Monitoring: Review web server access logs for anomalous requests directed at the /goform/module endpoint, particularly those containing unusually long or malformed input strings in the staticRouteNet parameter.

Compensating Controls: Deploy a Web Application Firewall (WAF) rule to inspect and block requests to the /goform/module interface that contain payloads exceeding expected input lengths.

Public Exploit Available: Yes, a public proof-of-concept exists via GitHub.

Given the high CVSS severity and the presence of public proof-of-concept code, this vulnerability should be treated with high urgency. Administrators must prioritize restricting access to the management interface until a vendor-supplied firmware patch is applied to neutralize the underlying buffer overflow risk.