CVE-2026-9430: Tenda F1202 GstDhcpSetSerof formGstDhcpSetSer stack-based overflow
A vulnerability was determined in Tenda F1202 1.2.0.20(408). Affected by this issue is the function formGstDhcpSetSer of the file /goform/GstDhcpSetSerof. Executing a manipulation of the argument dips can lead to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable remote web/remote administration (WAN access to the router management interface) in the device admin UI to prevent remote exploitation of /goform/GstDhcpSetSerof.
Tenda F1202 web administration remote_management = disabled - Compensating control
Restrict access to the device management interface to trusted IPs using firewall/ACLs; block WAN-originated traffic to the router's admin ports (HTTP/HTTPS/SSH/Telnet) at the perimeter.
- Compensating control
Configure WAF or perimeter firewall rules to block or drop requests targeting the path /goform/GstDhcpSetSerof and/or requests that include the 'dips' parameter to the device.
- Operational
Isolate affected Tenda F1202 devices from untrusted networks (disconnect from the Internet) until a vendor-supplied fix is available and applied.
- Operational
Monitor device and perimeter logs for requests to /goform/GstDhcpSetSerof and for signs of exploitation. If compromise is suspected, perform device factory reset or reimage and replace any credentials used to manage the device.
- Operational
Contact Tenda support for patched firmware and guidance for CVE mitigation; apply vendor firmware updates when provided.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-9430?
CVE-2026-9430 has a severity rating of high with a score of 8.8.
How do I fix CVE-2026-9430?
To mitigate CVE-2026-9430, update the Tenda F1202 firmware to the latest version that addresses the stack-based overflow vulnerability.
What type of vulnerability is CVE-2026-9430?
CVE-2026-9430 is a stack-based buffer overflow vulnerability.
Can CVE-2026-9430 be exploited remotely?
Yes, CVE-2026-9430 can be exploited remotely through the manipulation of the dips argument.
What is the affected product for CVE-2026-9430?
The affected product for CVE-2026-9430 is the Tenda F1202 running version 1.2.0.20(408).