A critical stack-based buffer overflow in Tenda HG10 firmware enables unauthenticated remote attackers to trigger a denial of service or potentially achieve remote code execution.

The Boa web service fails to perform boundary checks on the nextHop parameter within the formRoute function, leading to a stack-based buffer overflow that can be triggered by an unauthenticated attacker via a crafted HTTP POST request.

Successful exploitation of this vulnerability can lead to a complete denial of service of the affected router, disrupting critical network connectivity for all connected users and systems. Furthermore, because the Boa process operates with root privileges on the device, there is a significant risk that an attacker could leverage this memory corruption to achieve remote code execution, granting full control over the networking hardware. Given the CVSS score of 8.8, this vulnerability poses a severe risk to organizational infrastructure.

Immediate Action: Since no official patch is currently available, administrators should immediately isolate the management interface from the public internet and restrict access to trusted management networks only.

Proactive Monitoring: Security teams should monitor network traffic for anomalous HTTP POST requests directed at the /boaform/formRouting endpoint, specifically looking for abnormally long payloads in the nextHop parameter.

Compensating Controls: Deploy a Web Application Firewall (WAF) or an Intrusion Prevention System (IPS) with signatures configured to detect and drop HTTP requests containing excessive data within the nextHop parameter.

Public Exploit Available: Yes, a functional proof-of-concept is available via the researcher's GitHub repository.

Due to the ease of exploitation and the potential for full system compromise, this vulnerability must be treated with high urgency. Organizations utilizing Tenda HG10 devices must ensure the web management interface is not exposed to the internet. Monitor vendor communication channels closely for the release of an official firmware update and apply it immediately upon availability.