This flaw is a stack‐based buffer overflow in Tenda’s AC1206 httpd web management interface, triggered by manipulating the shareSpeed argument in the WifiGuestSet set_wl_guest_iplist function. The overflow can be triggered remotely through the /goform/WifiGuestSet API, allowing an attacker to write arbitrary data on the stack and execute malicious code. The vulnerability is identified as CWE‑119 and CWE‑121 and is rated high severity by the CVSS score of 8.7.

Tenda AC1206 routers running firmware version 15.03.06.23_multi_TD01 contain the vulnerable httpd component.

Because the attack vector is a web‑based request to a publicly reachable management interface, an unauthenticated attacker can construct the malicious payload from anywhere. The EPSS score is not available, but the vulnerability is not listed in the CISA KEV catalog, suggesting that public exploitation is possible but not confirmed. Without a vendor patch, the high CVSS indicates significant risk of remote code execution.