A critical stack-based buffer overflow in the Tenda AC10 router allows remote attackers to achieve unauthorized code execution, posing a significant risk to network integrity.

This is a stack-based buffer overflow (CWE-121) occurring within the fromSysToolChangePwd function of the /bin/httpd service. An attacker with low-level privileges can trigger this memory corruption by manipulating the sys.userpass argument, potentially leading to system compromise.

The vulnerability carries a CVSS score of 8.8, indicating a high level of severity. Successful exploitation allows for remote memory corruption, which can lead to complete device takeover, unauthorized access to network traffic, or the redirection of internal traffic to malicious endpoints. Such an event would result in significant operational disruption and the potential compromise of sensitive data traversing the local network.

Immediate Action: Since a vendor patch is currently unknown, administrators should isolate the management interface of the Tenda AC10 from the internet and restrict access to trusted internal IP addresses only.

Proactive Monitoring: Monitor device logs for unusual crashes of the /bin/httpd service or repeated failed authentication attempts that may indicate exploitation probes.

Compensating Controls: If the device supports it, configure a robust firewall rule to block all inbound traffic to the administrative interface from untrusted sources, effectively mitigating the remote attack vector.

Public Exploit Available: Yes, a technical write-up containing attack details exists via the vulnerability research repository listed in the references.

Given the high CVSS severity and the nature of the buffer overflow, immediate steps must be taken to limit the attack surface. Administrators should prioritize restricting network access to the device management interface and check the vendor support portal frequently for firmware updates that address this memory corruption flaw.