A critical stack-based buffer overflow in the Tenda FH451 router allows for remote code execution via unauthenticated manipulation of the PPPOEPassword parameter.

The vulnerability exists in the sub_3C434 function within the /goform/AdvSetWan endpoint, where the application fails to perform length validation on the wanmode or PPPOEPassword arguments. This allows an attacker to overwrite the stack, potentially leading to remote code execution or a denial of service condition.

The ability to achieve remote code execution on network infrastructure devices poses a severe threat to business continuity and data integrity. An attacker gaining control of a router can intercept internal traffic, pivot into the local network, or render the device unresponsive, resulting in significant downtime. Given the CVSS score of 8.8, this vulnerability represents a high-risk entry point for unauthorized access to internal resources.

Immediate Action: Since no official patch is currently available, administrators should restrict access to the web management interface of the Tenda FH451 to trusted internal IP addresses only.

Proactive Monitoring: Monitor device logs for anomalous traffic patterns directed at the /goform/AdvSetWan endpoint, particularly those involving excessive payload sizes or unexpected characters in POST requests.

Compensating Controls: Deploy a network-based intrusion detection system or a Web Application Firewall (WAF) to inspect incoming traffic and block requests containing unusually long strings within the PPPOEPassword parameter.

Public Exploit Available: Yes, a published proof-of-concept exists and is documented in the research write-up provided by the vulnerability reporter.

Given the availability of a public proof-of-concept and the potential for remote code execution, this vulnerability should be treated with high urgency. Organizations utilizing the Tenda FH451 should immediately isolate the device management interface from external exposure and monitor for official firmware updates from the vendor to remediate the underlying memory corruption flaw.