A critical buffer overflow vulnerability in the Tenda CX12L router allows unauthenticated remote attackers to execute arbitrary code or cause a denial of service.

The vulnerability exists within the /goform/RouteStatic endpoint, where the fromRouteStatic function processes the page parameter using an unsafe sprintf call. This flaw allows an unauthenticated attacker to send an oversized input that exceeds the 256-byte buffer, leading to memory corruption and potential arbitrary code execution.

Successful exploitation of this vulnerability poses a severe risk to organizational network security. An attacker gaining control over the router can monitor sensitive network traffic, intercept communications, or use the compromised device as a foothold to pivot into internal segments. Given the CVSS score of 8.8, this flaw represents a high risk to data confidentiality and system integrity.

Immediate Action: Contact Tenda support or check the official vendor portal for firmware updates that address this buffer overflow, as no specific public patch version is currently listed.

Proactive Monitoring: Monitor network traffic for anomalous POST requests directed at the /goform/RouteStatic endpoint, which may indicate exploitation attempts.

Compensating Controls: Implement firewall rules to restrict access to the device management interface to trusted internal IP addresses only, effectively mitigating remote attack vectors.

Public Exploit Available: Yes, a proof-of-concept Python script is available via the linked researcher write-up on GitHub.

The severity of this vulnerability, combined with the availability of a functional proof-of-concept, necessitates immediate attention. Administrators must prioritize restricting access to the vulnerable endpoint and applying manufacturer firmware updates as soon as they are released to prevent potential device compromise.