The vulnerable software is Shenzhen Tenda Technology’s router firmware, Tenda PW201A version 1.0.5. A buffer overflow exists in the SafeMacFilter function's page parameter, which can be triggered by a crafted HTTP request. The overflow corrupts memory and causes the device to crash, resulting in a denial of service for any user on that network. No information indicates a possibility of remote code execution or privilege escalation; the impact is limited to availability only.

Shenzhen Tenda Technology’s router product, Tenda PW201A, firmware version 1.0.5 is affected. No additional versions or variants are listed.

The published EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, suggesting a lower probability of widespread exploitation but a high potential impact if an attacker can deliver a malicious HTTP request to the device. The primary attack vector is remote over HTTP; an attacker must be able to communicate with the router, either locally or over the internet if the device is exposed. Given the nature of buffer overflows, a successful exploit would lead to a crash of the SafeMacFilter process, rendering the device unavailable until a reboot or firmware reset occurs.