CVE-2025-63455

Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow via the shareSpeed parameter in the fromSetWifiGusetBasic function

High · published November 10, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
34.2
In the wild
Unconfirmed
What it is

⚡ A sneaky stack overflow is lurking in Tenda AX-3's shareSpeed parameter! One crafted request could send your router into a tailspin, causing a Denial of Service. 🚨 Think of it like a restaurant that can't handle a sudden influx of orders — a flood of requests with no waiting staff means chaos in the kitchen! That's exactly what happens here when this vulnerability is exploited with a cleverly crafted request. An attacker could overload the system, leading to a complete service interruption. This means your Wi-Fi could go down, leaving you without internet access until the issue is resolved. Imagine trying to stream your favorite show only to be met with a buffering screen – absolutely devastating!

Put simply

Think of it like a restaurant that can't handle a sudden influx of orders — a flood of requests with no waiting staff means chaos in the kitchen! That's exactly what happens here when this vulnerability is exploited with a cleverly crafted request. This vulnerability in the Tenda AX-3 occurs when the shareSpeed parameter is processed by the fromSetWifiGusetBasic function, leading to a stack overflow, which can be triggered via a specially crafted request.

What to do

An attacker could overload the system, leading to a complete service interruption. This means your Wi-Fi could go down, leaving you without internet access until the issue is resolved. Imagine trying to stream your favorite show only to be met with a buffering screen – absolutely devastating! To mitigate this issue, upgrade your Tenda AX-3 firmware to the latest version immediately. Additionally, monitor your network for unusual traffic patterns that could indicate attempts to exploit this vulnerability. You've got this! Stay proactive, and your network will be back up and running smoothly in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00411 · 34.2th percentile
Published
2025-11-10T00:00Z
EPSS history
Timeline
  • 10 NOV 00:00Z
    Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow via the shareSpeed parameter in the fromSetWifiGusetBasic function
    cvelistv5