A critical buffer overflow vulnerability in the Tenda HG10 router allows remote attackers to cause memory corruption and potential denial-of-service conditions.

The vulnerability exists within the Boa web server component, specifically in the formWanRedirect function. A low-privileged authenticated attacker can send a crafted HTTP POST request to the /boaform/formWanRedirect endpoint with an excessively long value in the if parameter, leading to a buffer overflow and memory corruption.

Successful exploitation of this vulnerability can lead to a complete denial-of-service, rendering the network device unresponsive and requiring a manual reboot. Given the CVSS score of 8.8, this represents a high-severity risk that could disrupt critical connectivity for users relying on the Tenda HG10 for network access. Unauthorized memory manipulation may also facilitate further exploitation, potentially leading to unauthorized system control.

Immediate Action: Contact Tenda support or check the official vendor website for firmware updates that address this buffer overflow issue, as no specific patch version is currently identified.

Proactive Monitoring: Monitor network traffic for anomalous HTTP POST requests directed at the /boaform/formWanRedirect endpoint, particularly those containing unusually long parameters.

Compensating Controls: Restrict access to the device management interface by limiting administrative access to trusted internal IP addresses only. A Web Application Firewall or similar inspection tool could be configured to block requests with oversized parameters.

Public Exploit Available: Yes, a proof-of-concept exists as detailed in the technical write-up published on GitHub.

Given the high CVSS score and the public availability of exploit details, administrators must treat this vulnerability with urgency. If a firmware update is not yet available from the vendor, implement strict network segmentation to isolate the affected devices from external exposure and restrict management interface access to authorized personnel. Prioritize applying the vendor-supplied fix as soon as it is released to prevent potential service disruption.