The Tenda AC1206 router firmware version v15.03.06.23 contains multiple stack overflow vulnerabilities in the fromGstDhcpSetSer function. These vulnerabilities are exploitable through the username and password parameters in HTTP requests, potentially leading to a Denial of Service by crashing the device or disrupting its normal operation. The vulnerabilities were publicly disclosed without an associated CVSS score or vendor remediation guidance.

Successful exploitation results in a Denial of Service condition on the affected device, disrupting network availability. There is no evidence of code execution or data compromise from the provided information. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the device's management interface to trusted networks and monitor for unusual HTTP requests targeting username and password parameters.