Authenticated router compromise via page parameter overflow

Stack overflow in Tenda FH1203 Firmware 2.0.1.6 allows remote authenticated users to corrupt memory via a crafted page parameter. The fromDhcpListClient handler accepts an overlong page value and writes beyond a stack buffer; the unavailable linked disclosure prevents identification of the exact copying operation. An adjacent-network user with low privileges can crash or take control of the router, while CISA records proof-of-concept exploitation rather than active exploitation.