The vulnerability is a stack overflow in the IPMacBindRuleIp parameter of the formIPMacBindModify function in Tenda G0 firmware. When an attacker sends a crafted HTTP request, the overflow corrupts stack memory and causes the device to crash, resulting in a denial of service. The flaw stems from improper bounds checking – a classic buffer overflow scenario.

Shenzhen Tenda Technology Co., Ltd Tenda G0 version 15.11.0.5 is affected. No other versions or products were listed.

Based on the description, the likely attack vector is remote over HTTP, suggesting that an unauthenticated user can trigger the stack overflow from an external or local network if the device is exposed. The CVSS score of 7.5 indicates a high severity flaw, and the EPSS score of <1% suggests a low but nonzero probability of exploitation. No fix has been reported so far, but the possibility of widespread DoS keeps the risk relatively high. The vulnerability is not listed in the CISA KEV catalog.