The vulnerability is a buffer overflow in the macAddr parameter of the formDelStaState function on the Tenda W20E router, which can be triggered by a purposely crafted HTTP request. An attacker can leverage the overflow to cause the device to crash or reboot, leading to a denial of service. The impact is limited to availability, with no evidence of remote code execution or data compromise in the provided description.

Shenzhen Tenda Technology Co., Ltd. Tenda W20E running firmware version 15.11.0.6 is impacted. No additional versions were listed in the available data.

The vulnerability can be triggered remotely by sending an HTTP request to the affected endpoint. The attack vector is inferred from the mention of a crafted HTTP request; no additional prerequisites are described. The EPSS score is not available, so the exploitation probability cannot be quantified. The CVSS score is not provided, but the lack of a KEV entry indicates it is not currently listed in CISA's Known Exploited Vulnerabilities catalog. The risk is primarily the potential for sustained denial of service, which could affect network operations if the router serves critical network functions.