Multiple stack overflows were discovered in the formSetDebugCfgr function of Shenzhen Tenda Technology Co., Ltd Tenda G0. The overflow can be triggered by manipulating the enable, level, and module parameters in an HTTP request. The vulnerability can cause the device to become unresponsive, effectively creating a denial of service condition.

The affected product is Shenzhen Tenda Technology Co., Ltd Tenda G0, firmware version 15.11.0.5. No additional versions were listed in the advisory.

The EPSS score is not available and the flaw is not listed in the CISA KEV catalog. The flaw is a stack-based buffer overflow that can be exploited by an attacker sending a crafted HTTP request to the affected device over the network. Because the vulnerability is triggered by external traffic, any device exposed to the internet or an untrusted internal network is at risk. The severity is likely high due to the potential for service disruption, though a CVSS score was not provided.