CVE Catalog
CVE-2025-69763
CriticalSummary
Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formSetIptv via the vlanId parameter, which can cause memory corruption and enable remote code execution.
Risk Assessment
The vulnerability can be exploited for remote code execution on the router, potentially leading to device takeover and network compromise.
Recommendation
Update the Tenda AX3 router firmware to the latest version with a fix.
Original NVD description (English source)
Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formSetIptv via the vlanId parameter, which can cause memory corruption and enable remote code execution.