A buffer overflow exists in the IPMacBindRule parameter of the formIPMacBindAdd function in Tenda G0 v15.11.0.5. The overflow can be triggered by a specially crafted HTTP request, causing the device to crash and stop processing requests. The primary impact is a service interruption of the affected device with no direct confidentiality or integrity compromise. The weakness corresponds to an uncontrolled buffer overrun (CWE-119).

Device: Tenda G0 (firmware version 15.11.0.5) manufactured by Shenzhen Tenda Technology Co., Ltd. No other vendor or product versions are reported to be affected.

The vulnerability can be exploited remotely by sending a malformed HTTP request to the affected device. Exploitation does not require local access or elevated privileges. Although an EPSS score is unavailable and the vulnerability is not listed in CISA KEV, the nature of a remote DoS implies potential operational impact. The lack of patch availability in the public release underscores the need for immediate remediation.