The reported vulnerability is a stack overflow in the picCropName parameter of formCropAndSetWewifiPic. A specially crafted HTTP request can trigger the overflow, causing the Tenda G0 device to crash or become unresponsive. The flaw corresponds to CWE-119, a buffer or stack overflow, and results in a denial of service that prevents normal operation of the network device.

Shenzhen Tenda Technology Co., Ltd Tenda G0 firmware version 15.11.0.5 is affected. No other firmware revisions are mentioned as vulnerable in the advisory.

The CVSS score is not provided, but the impact is a DoS that can incapacitate the device. The EPSS score is unavailable, so the likelihood of exploitation cannot be quantified, though the vulnerability is network-based and could be triggered by any host capable of sending HTTP requests to the device. The vulnerability is not listed in CISA KEV, and no public exploit has been identified.