A critical stack-based buffer overflow in Tenda i12 firmware allows remote attackers to achieve remote code execution, posing a significant risk to network integrity.

This vulnerability resides in the formwrlSSIDset function within the /goform/wifiSSIDset endpoint. An attacker with low-level privileges can supply a crafted index or wl_radio parameter that lacks proper length validation, leading to a stack-based buffer overflow.

Successful exploitation of this vulnerability allows an attacker to execute arbitrary code on the affected device, potentially leading to a full system compromise. Given the CVSS score of 8.8, this represents a high-severity threat that could facilitate unauthorized network access, data exfiltration, or the permanent disruption of network services, resulting in significant operational downtime.

Immediate Action: As no official patch is currently confirmed, administrators should restrict network access to the device management interface and disable the affected wireless configuration features if not required.

Proactive Monitoring: Security teams should monitor network traffic for suspicious POST requests directed at the /goform/wifiSSIDset endpoint, particularly those containing unusually long string payloads in the index parameter.

Compensating Controls: Deploy a Web Application Firewall (WAF) or an Intrusion Prevention System (IPS) with rules configured to inspect and block requests to the vulnerable endpoint that exceed expected parameter lengths.

Public Exploit Available: Yes, a published proof-of-concept exists, as documented in the technical write-up provided by the vulnerability researcher.

Given the availability of a functional proof-of-concept and the potential for remote code execution, this vulnerability demands immediate attention. Administrators must prioritize isolating affected Tenda i12 devices from external networks and monitor vendor channels for the release of a security update. Applying the update as soon as it becomes available is the only definitive method to eliminate this risk.