A buffer overflow vulnerability has been discovered in Tenda HG10 routers affecting the formRoute function in the Boa Service component. The vulnerability is triggered by manipulating the nextHop argument in the /boaform/formRouting file. The flaw can be exploited remotely and a public exploit is available. This affects the HG7_HG9_HG10re_300001138_en_xpon firmware version. The vulnerability allows attackers to cause buffer overflow conditions through network-based attacks.