A stack-based buffer overflow vulnerability in Tenda FH1202 routers could allow an authenticated attacker to execute arbitrary code or cause a denial of service.

The vulnerability exists within the fromDhcpListClient function, where the page parameter is processed without sufficient length validation before being passed to a sprintf function. This memory corruption flaw allows a low-privileged authenticated attacker to trigger a stack-based buffer overflow.

Successful exploitation of this vulnerability allows a remote attacker to achieve remote code execution on the affected networking device. This could lead to a total compromise of the router, enabling the attacker to intercept network traffic, pivot into internal network segments, or permanently disable critical connectivity, resulting in significant operational downtime and security breaches. The CVSS score of 8.8 reflects the high risk associated with the potential for total system compromise.

Immediate Action: Since no official patch is currently available from the vendor, users should restrict administrative access to the device management interface to trusted internal segments only.

Proactive Monitoring: Monitor network traffic for unusual POST requests directed at the /goform/DhcpListClient endpoint and review system logs for signs of service crashes or unexpected process termination.

Compensating Controls: Implement a Web Application Firewall or network-level access control list to block unauthorized or suspicious traffic from reaching the device web management interface.

Public Exploit Available: Yes, a published proof-of-concept exists, as documented in the research write-up referenced by the CVE record.

Given the availability of a public proof-of-concept and the potential for remote code execution, this vulnerability poses a severe risk to network infrastructure. Administrators should isolate the affected devices from external networks and monitor for vendor updates continuously. If updates remain unavailable, consider replacing the hardware with a supported and patched alternative to eliminate the risk of exploitation.