A stack overflow was identified in the ip parameter of the fromNetToolGet function in the Tenda O3 Wireless Router firmware v1.0.0.5(4180). The flaw can be triggered by a crafted HTTP request, causing the router to crash and rendering the device unavailable. The weakness is a stack‑based buffer overflow (CWE-121). The impact is a loss of network connectivity for all users relying on the router, compromising availability but not confidentiality or integrity.

The vulnerability affects the Shenzhen Tenda Technology Co., Ltd Tenda O3 Wireless Router running firmware version v1.0.0.5(4180). No other vendors or product versions are listed.

Attackers can remotely exploit the flaw by sending a malformed ip parameter to the router’s HTTP endpoint. The resulting stack overflow leads to a denial of service, which is considered a high severity issue. The CVSS score is 7.5 and the EPSS score is < 1%, indicating a very low but nonzero exploitation probability. The vulnerability is not listed in the CISA KEV catalog, suggesting no publicly documented exploits yet. Based on the description, it is inferred that remote exploitation is feasible if the router is exposed to untrusted networks, and the attack vector is likely via the HTTP interface as the crafted request targets that endpoint.