A critical stack-based buffer overflow vulnerability in Tenda FH1202 routers may allow remote attackers to achieve remote code execution or cause a denial of service.

This vulnerability is a stack-based buffer overflow triggered by improper bounds checking within the WrlExtraSet function of the httpd service. By submitting a specially crafted long string to the GO parameter, an authenticated attacker can overwrite stack memory to execute arbitrary code or crash the device.

The potential for remote code execution on network infrastructure poses a severe threat to internal network integrity. Successful exploitation could lead to full device compromise, allowing attackers to intercept traffic, pivot into the local network, or render the router inoperable, resulting in significant service downtime. The CVSS score of 8.8 reflects the high severity of this impact.

Immediate Action: Since no official patch is currently listed, users should restrict administrative access to the web interface from untrusted networks and disable remote management features immediately. Contact Tenda support or check the official vendor website for firmware updates that address this buffer overflow.

Proactive Monitoring: Monitor device logs for unusual POST requests directed at the /goform/WrlExtraSet endpoint and watch for unexpected device reboots or performance degradation.

Compensating Controls: Implement access control lists (ACLs) on the network perimeter to restrict traffic to the router management interface to known, trusted IP addresses only.

Public Exploit Available: Yes, a proof-of-concept is documented in the researcher's technical write-up.

Given the availability of public proof-of-concept code and the critical nature of a buffer overflow in router firmware, this vulnerability must be treated with high urgency. Administrators should isolate affected devices from public-facing exposure until a vendor-supplied firmware update is applied to remediate the underlying memory corruption flaw.