CVE-2025-70744
HighSummary
A stack overflow vulnerability was discovered in the cloneType parameter of the sub_65B5C function in Tenda AX-1806 router version 1.0.0.1. This flaw allows attackers to cause a Denial of Service (DoS) via a crafted request.
Risk Assessment
An attacker can remotely crash the router, leading to network disruption and loss of internet access for users. The vulnerability may be exploited without authentication, increasing the attack risk.
Recommendation
It is recommended to immediately update the router firmware to the latest available version if a patch is released by the vendor. If no update is available, restrict access to the administrative panel and network interfaces to trusted hosts only.
Other vulnerabilities in Tenda AX-1806
See all- CVE-2025-70644High
A vulnerability was discovered in Tenda AX-1806 v1.0.0.1. It involves a stack overflow in the time parameter of the sub_60CFC function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
- CVE-2025-70650High
A vulnerability was discovered in Tenda AX-1806 v1.0.0.1. It involves a stack overflow in the deviceList parameter of the formSetMacFilterCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
- CVE-2025-70645High
A vulnerability was discovered in Tenda AX-1806 v1.0.0.1. It involves a stack overflow in the deviceList parameter of the formSetWifiMacFilterCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
- CVE-2025-71020High
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub_4C408 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
- CVE-2025-70746High
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the timeZone parameter of the fromSetSysTime function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
- CVE-2025-70656High
A stack overflow vulnerability was discovered in the mac parameter of the sub_65B5C function in Tenda AX-1806 firmware version 1.0.0.1. This flaw allows attackers to cause a Denial of Service (DoS) via a crafted request.
- CVE-2025-71019High
Tenda AX-1806 v1.0.0.1 was found to contain a stack overflow in the wanSpeed parameter of the sub_65B5C function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
- CVE-2025-71021High
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serverName parameter of the sub_65A28 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
- CVE-2025-70747High
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serviceName parameter of the sub_65A28 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
- CVE-2025-70753High
A stack overflow was discovered in the Tenda AX-1806 router version 1.0.0.1 in the security_5g parameter of the sub_4CA50 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
Original NVD description (English source)
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the cloneType parameter of the sub_65B5C function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.