The vulnerable software is Shenzhen Tenda Technology’s router firmware, Tenda PW201A version 1.0.5. A buffer overflow (CWE-120) exists in the SafeMacFilter function’s page parameter, which can be triggered by a crafted HTTP request. The overflow corrupts memory and causes the device to crash, resulting in a denial of service for any user on that network. No information indicates a possibility of remote code execution or privilege escalation; the impact is limited to availability only.

Shenzhen Tenda Technology’s router product, Tenda PW201A, firmware version 1.0.5 is affected. No additional versions or variants are listed.

The EPSS score is <1% and the vulnerability is not listed in the CISA KEV catalog, suggesting a lower probability of widespread exploitation but a high potential impact if an attacker can deliver a malicious HTTP request to the device. The CVSS score of 7.5 indicates moderate to high severity. The primary attack vector is inferred to be remote over HTTP, based on the description that the exploit is triggered by a crafted HTTP request; an attacker must be able to communicate with the router, either locally or over the internet if the device is exposed. Given the nature of buffer overflows, a successful exploit would lead to a crash of the SafeMacFilter process, rendering the device unavailable until a reboot or firmware reset occurs.