The flaw is a stack overflow in the page parameter of the fromDhcpListClient function, allowing an attacker to send a crafted HTTP request that corrupts the program stack and causes the router firmware to crash. This aborts all operations on the device, rendering it unavailable and potentially disrupting the local network. The weakness corresponds to stack memory corruption (CWE‑121).

The vulnerable product is the Shenzhen Tenda Technology Co., Ltd Tenda FH451 router running firmware version 1.0.0.9. No other vendors or products are listed as affected.

The CVSS score of 7.5 reflects a high severity and the EPSS score of <1% indicates a very low but nonzero likelihood of exploitation. The vulnerability is not listed in CISA’s KEV catalog. It lies in a network‑exposed function, and an attacker can trigger it remotely by crafting a malicious HTTP request. While no exploit is documented, the remote nature of the attack and the DoS impact suggest a moderate to high risk for environments where the device is exposed to untrusted networks.