CVE-2025-70645
HighSummary
A vulnerability was discovered in Tenda AX-1806 v1.0.0.1. It involves a stack overflow in the deviceList parameter of the formSetWifiMacFilterCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
Risk Assessment
The risk includes the possibility of remotely causing the device to crash, which could lead to network disruption or loss of service availability.
Recommendation
It is recommended to update the device firmware to the latest version if a patch is available, and to restrict access to the device from trusted networks.
Other vulnerabilities in Tenda AX-1806
See all- CVE-2025-70644High
A vulnerability was discovered in Tenda AX-1806 v1.0.0.1. It involves a stack overflow in the time parameter of the sub_60CFC function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
- CVE-2025-70650High
A vulnerability was discovered in Tenda AX-1806 v1.0.0.1. It involves a stack overflow in the deviceList parameter of the formSetMacFilterCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
- CVE-2025-71020High
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub_4C408 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
- CVE-2025-70746High
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the timeZone parameter of the fromSetSysTime function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
- CVE-2025-70656High
A stack overflow vulnerability was discovered in the mac parameter of the sub_65B5C function in Tenda AX-1806 firmware version 1.0.0.1. This flaw allows attackers to cause a Denial of Service (DoS) via a crafted request.
- CVE-2025-71019High
Tenda AX-1806 v1.0.0.1 was found to contain a stack overflow in the wanSpeed parameter of the sub_65B5C function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
- CVE-2025-70744High
A stack overflow vulnerability was discovered in the cloneType parameter of the sub_65B5C function in Tenda AX-1806 router version 1.0.0.1. This flaw allows attackers to cause a Denial of Service (DoS) via a crafted request.
- CVE-2025-71021High
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serverName parameter of the sub_65A28 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
- CVE-2025-70747High
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serviceName parameter of the sub_65A28 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
- CVE-2025-70753High
A stack overflow was discovered in the Tenda AX-1806 router version 1.0.0.1 in the security_5g parameter of the sub_4CA50 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
Original NVD description (English source)
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the deviceList parameter of the formSetWifiMacFilterCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.