A buffer overflow exists in the IPMacBindRule parameter of the formIPMacBindAdd function in the Tenda G0 router firmware v15.11.0.5. The flaw allows an attacker to trigger an overflow by sending a specially crafted HTTP request, leading the device to crash and stop processing requests. This vulnerability does not compromise data confidentiality or integrity, but it effectively disrupts the router’s availability for legitimate users.

The affected product is the Tenda G0 router running firmware version 15.11.0.5, produced by Shenzhen Tenda Technology Co., Ltd. No other vendors or product versions are currently known to be impacted.

The overflow can be exploited remotely over the network without requiring local access or elevated privileges. The EPSS score of less than 1% indicates a low probability of widespread attacks, yet the remote nature of the DoS and the CVSS score of 7.5 reflect a high severity level. Although the vulnerability is not listed in the CISA KEV catalog, operators should assess the potential operational impact of a DoS to critical networking equipment.