A buffer overflow vulnerability resides in the IPMacBindIndex parameter of the formIPMacBindDel function in Shenzhen Tenda Technology Co., Ltd Tenda G0 firmware version 15.11.0.5. An attacker can exploit this by sending a specifically crafted HTTP request, which causes the device to crash and become unavailable, leading to a denial of service condition for legitimate users. The primary weakness is an unchecked buffer boundary that can be overflowed, a classic buffer overflow flaw.

The affected product is the Tenda G0 router, firmware 15.11.0.5, sold by Shenzhen Tenda Technology Co., Ltd. No other vendor or product versions are listed as impacted.

The EPSS score is < 1% and the vulnerability is not listed in the CISA KEV catalog, so the public exploit probability is low. However, the flaw can be triggered via the web administration interface, therefore the attack vector is remote over HTTP. Since the flaw causes a crash rather than code execution, the difficulty of exploitation is low: a simple HTTP POST or GET request with malicious data is sufficient. The impact is loss of availability of the router or any services that depend on it, with a CVSS score of 7.5.