CVE-2025-70656
HighSummary
A stack overflow vulnerability was discovered in the mac parameter of the sub_65B5C function in Tenda AX-1806 firmware version 1.0.0.1. This flaw allows attackers to cause a Denial of Service (DoS) via a crafted request.
Risk Assessment
An attacker can remotely crash the device, leading to network disruptions and unavailability of services for users.
Recommendation
It is recommended to immediately update the device firmware to the latest available version if a patch is provided by the vendor. If no update is available, restrict device access to trusted networks and monitor traffic for suspicious requests.
Other vulnerabilities in Tenda AX-1806
See all- CVE-2025-70644High
A vulnerability was discovered in Tenda AX-1806 v1.0.0.1. It involves a stack overflow in the time parameter of the sub_60CFC function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
- CVE-2025-70650High
A vulnerability was discovered in Tenda AX-1806 v1.0.0.1. It involves a stack overflow in the deviceList parameter of the formSetMacFilterCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
- CVE-2025-70645High
A vulnerability was discovered in Tenda AX-1806 v1.0.0.1. It involves a stack overflow in the deviceList parameter of the formSetWifiMacFilterCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
- CVE-2025-71020High
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub_4C408 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
- CVE-2025-70746High
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the timeZone parameter of the fromSetSysTime function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
- CVE-2025-71019High
Tenda AX-1806 v1.0.0.1 was found to contain a stack overflow in the wanSpeed parameter of the sub_65B5C function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
- CVE-2025-70744High
A stack overflow vulnerability was discovered in the cloneType parameter of the sub_65B5C function in Tenda AX-1806 router version 1.0.0.1. This flaw allows attackers to cause a Denial of Service (DoS) via a crafted request.
- CVE-2025-71021High
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serverName parameter of the sub_65A28 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
- CVE-2025-70747High
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serviceName parameter of the sub_65A28 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
- CVE-2025-70753High
A stack overflow was discovered in the Tenda AX-1806 router version 1.0.0.1 in the security_5g parameter of the sub_4CA50 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
Original NVD description (English source)
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the mac parameter of the sub_65B5C function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.