The Tenda F1202 router firmware version 1.2.0.20(408) contains a stack-based buffer overflow vulnerability in the formGstDhcpSetSer function located in the /goform/GstDhcpSetSerof file. Improper handling of the dips argument allows an attacker to overflow the stack buffer remotely, potentially leading to arbitrary code execution or denial of service. The vulnerability has been publicly disclosed, but no official patch or remediation guidance is currently available from the vendor. The CVSS 4.0 base score is 8.7, reflecting high impact and ease of exploitation without privileges or user interaction.

Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code or cause a denial of service on the affected Tenda F1202 device. The vulnerability does not require user interaction or privileges, increasing its risk. However, no confirmed exploits in the wild have been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider limiting network exposure of the affected device, such as restricting remote access to trusted networks only. Monitor vendor channels for updates and apply patches promptly once available.