The Tenda F1202 router firmware version 1.2.0.20(408) contains a stack-based buffer overflow vulnerability in the formGstDhcpSetSer function located in the /goform/GstDhcpSetSerof file. An attacker can remotely manipulate the 'dips' argument to trigger the overflow, potentially leading to arbitrary code execution or denial of service. The vulnerability requires no user interaction and has been publicly disclosed. There is no vendor-provided patch or official remediation information available at this time. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code or cause a denial of service on the affected Tenda F1202 device. Given the high CVSS score of 8.7 and the remote attack vector, the impact is significant for network security and device stability. The public disclosure of exploit code increases the likelihood of attacks targeting this vulnerability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider limiting network exposure of the affected device, such as restricting access to the management interface from untrusted networks. Monitor for updates from Tenda regarding patches or official mitigation steps.