CVE-2024-10351 is a critical vulnerability in Tenda RX9 Pro routers, specifically affecting the handling of POST requests to /goform/setMacFilterCfg. This stack-based buffer overflow can be triggered remotely by manipulating the deviceList argument, potentially leading to arbitrary code execution. While the SOCRadar Vulnerability Risk Score (SVRS) of 77 suggests a high level of risk, it does not reach the critical threshold of 80, so immediate action, but not emergency action is needed. A public exploit exists, increasing the likelihood of exploitation in the wild. The CVSS score is 8.8. The CWE classification is CWE-787, highlighting the dangerous nature of buffer overflows. This flaw enables attackers to potentially gain control of the affected device, compromising network security and privacy. Due to the existence of a public exploit, organizations using Tenda RX9 Pro routers should apply available patches immediately.