A buffer overflow exists in the page parameter of the qossetting function in Tenda PW201A v1.0.5, allowing an attacker to supply a crafted HTTP request that triggers a crash of the service. The flaw is a classic out‑of‑bounds write, which disrupts program execution and causes the device to become unavailable. It does not directly compromise confidentiality or integrity but results in a service outage.

Shenzhen Tenda Technology Co., Ltd Tenda PW201A firmware version 1.0.5 is affected. No other products or versions are mentioned.

The vulnerability is a Denial of Service; the EPSS score of < 1% indicates a low likelihood of exploitation, and it is not listed in the CISA KEV catalog. The CVSS score of 7.5 reflects a high severity impact. An attacker could target the device by sending a crafted HTTP request that overflows the page parameter buffer, but successful exploitation would require direct network access to the vulnerable firmware. While exploitation is considered unlikely, the potential for service disruption remains significant.