A critical remote buffer overflow vulnerability in Tenda HG10 routers allows unauthenticated attackers to crash the device, posing a significant risk to network availability.

The vulnerability is a buffer overflow occurring within the Boa web server's formURL interface. By sending a crafted HTTP POST request with an excessively long Keywd parameter, an unauthenticated remote attacker can overwrite adjacent memory, leading to service disruption.

The exploitation of this vulnerability results in a denial of service, rendering the Tenda HG10 router non-responsive and effectively severing network connectivity for all dependent systems. With a CVSS score of 9.8, this critical flaw represents a severe risk to operational continuity, as it can be triggered remotely without any user interaction or authentication.

Immediate Action: Since no official patch is currently identified, administrators should immediately restrict access to the web management interface of the HG10 device to trusted internal management subnets only.

Proactive Monitoring: Monitor device logs for repetitive or malformed HTTP POST requests directed at the /boaform/admin/formURL endpoint, which may indicate attempted exploitation.

Compensating Controls: Deploy a network-level firewall or Web Application Firewall (WAF) rule to block or sanitize traffic containing abnormally long values in the Keywd parameter field.

Public Exploit Available: Yes, a published proof of concept exists, as documented in the technical write-up provided in the vulnerability references.

Given the critical severity of this buffer overflow and the availability of public exploitation details, immediate action is required to isolate affected devices from external network exposure. Organizations should prioritize restricting administrative access to the device and maintain vigilance for vendor-provided firmware updates that address the underlying memory corruption flaw.