CVE Catalog

CVE-2025-69762

Critical
Published: Translated: NVD NIST

Summary

Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formSetIptv via the list parameter, which can cause memory corruption and enable remote code execution.

Risk Assessment

The vulnerability can be exploited for remote code execution on the router, potentially leading to device takeover and network compromise.

Recommendation

Update the Tenda AX3 router firmware to the latest version with a fix.

Original NVD description (English source)

Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formSetIptv via the list parameter, which can cause memory corruption and enable remote code execution.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS