CVE-2025-70753
HighSummary
A stack overflow was discovered in the Tenda AX-1806 router version 1.0.0.1 in the security_5g parameter of the sub_4CA50 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
Risk Assessment
An attack could lead to unavailability of the network device, disrupting network operations and services for users.
Recommendation
It is recommended to update the router firmware to the latest version if available, and restrict access to the administrative interface.
Other vulnerabilities in Tenda AX-1806
See all- CVE-2025-70644High
A vulnerability was discovered in Tenda AX-1806 v1.0.0.1. It involves a stack overflow in the time parameter of the sub_60CFC function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
- CVE-2025-70650High
A vulnerability was discovered in Tenda AX-1806 v1.0.0.1. It involves a stack overflow in the deviceList parameter of the formSetMacFilterCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
- CVE-2025-70645High
A vulnerability was discovered in Tenda AX-1806 v1.0.0.1. It involves a stack overflow in the deviceList parameter of the formSetWifiMacFilterCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
- CVE-2025-71020High
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub_4C408 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
- CVE-2025-70746High
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the timeZone parameter of the fromSetSysTime function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
- CVE-2025-70656High
A stack overflow vulnerability was discovered in the mac parameter of the sub_65B5C function in Tenda AX-1806 firmware version 1.0.0.1. This flaw allows attackers to cause a Denial of Service (DoS) via a crafted request.
- CVE-2025-71019High
Tenda AX-1806 v1.0.0.1 was found to contain a stack overflow in the wanSpeed parameter of the sub_65B5C function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
- CVE-2025-70744High
A stack overflow vulnerability was discovered in the cloneType parameter of the sub_65B5C function in Tenda AX-1806 router version 1.0.0.1. This flaw allows attackers to cause a Denial of Service (DoS) via a crafted request.
- CVE-2025-71021High
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serverName parameter of the sub_65A28 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
- CVE-2025-70747High
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serviceName parameter of the sub_65A28 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
Original NVD description (English source)
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security_5g parameter of the sub_4CA50 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.