The flaw is a stack overflow in the page parameter of the fromDhcpListClient function, allowing an attacker to send a crafted HTTP request that corrupts the program stack and causes the router firmware to crash. This aborts all operations on the device, rendering it unavailable and potentially disrupting the local network. The weakness corresponds to improper handling of buffer or data (CWE‑119).

The vulnerable product is the Shenzhen Tenda Technology Co., Ltd Tenda FH451 router running firmware version 1.0.0.9. No other vendors or products are listed as affected.

EPSS information is not available and the vulnerability is not listed in CISA’s KEV catalog, so an exact exploitation likelihood cannot be quantified. The defect lies in a network‑exposed function, and an attacker can trigger it remotely by crafting a malicious HTTP request. While there is no documented exploit, the remote nature of the attack and the DoS impact suggest a moderate risk for environments where the device is exposed to untrusted networks.