CVE Catalog
CVE-2025-69766
CriticalSummary
Tenda AX3 firmware v16.03.12.11 contains a stack-based buffer overflow in the formGetIptv function due to improper handling of the citytag stack buffer, which may result in memory corruption and remote code execution.
Risk Assessment
An attacker can exploit this vulnerability to achieve remote code execution on the router, potentially leading to device takeover and network compromise.
Recommendation
Update the Tenda AX3 router firmware to the latest available version that includes a fix.
Original NVD description (English source)
Tenda AX3 firmware v16.03.12.11 contains a stack-based buffer overflow in the formGetIptv function due to improper handling of the citytag stack buffer, which may result in memory corruption and remote code execution.