CVE-2025-71026
HighSummary
Tenda AX-3 v16.03.12.10_CN contains a stack overflow in the wanSpeed2 parameter of the fromAdvSetMacMtuWan function. Attackers can cause a Denial of Service (DoS) via a crafted request.
Risk Assessment
An attacker could crash the router, leading to network disruption and unavailability of services.
Recommendation
Update the router firmware to the latest version if a patch is available, or restrict access to the admin panel.
Other vulnerabilities in Tenda AX-3
See all- CVE-2025-71027High
Tenda AX-3 v16.03.12.10_CN contains a stack overflow in the wanMTU2 parameter of the fromAdvSetMacMtuWan function. Attackers can cause a Denial of Service (DoS) via a crafted request.
- CVE-2025-71025High
Tenda AX-3 v16.03.12.10_CN contains a stack overflow in the cloneType2 parameter of the fromAdvSetMacMtuWan function. Attackers can cause a Denial of Service (DoS) via a crafted request.
- CVE-2025-71024High
Tenda AX-3 v16.03.12.10_CN contains a stack overflow in the serviceName2 parameter of the fromAdvSetMacMtuWan function. Attackers can cause a Denial of Service (DoS) via a crafted request.
- CVE-2025-71023High
Tenda AX-3 v16.03.12.10_CN contains a stack overflow in the mac2 parameter of the fromAdvSetMacMtuWan function. Attackers can cause a Denial of Service (DoS) via a crafted request.
Original NVD description (English source)
Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the wanSpeed2 parameter of the fromAdvSetMacMtuWan function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.