CVE-2025-63456

Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the time parameter in the SetSysTimeCfg function

Medium · published November 10, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
32.7
In the wild
Unconfirmed
What it is

⚠️ A crafty request could bring your Tenda AX-1803 to its knees! This stack overflow in the SetSysTimeCfg function is a chance for attackers to launch a Denial of Service attack. 🔥 Think of it like overloading a restaurant's kitchen with too many orders at once, causing a complete shutdown of food service. When the time parameter gets overloaded, the router can't handle the chaos and just freezes! An attacker could exploit this vulnerability to flood your device with crafted requests, leading to a complete Denial of Service. This means your network could go down, leaving you and your users with disrupted service and a potential loss of access to the internet. Not ideal!

Put simply

Think of it like overloading a restaurant's kitchen with too many orders at once, causing a complete shutdown of food service. When the time parameter gets overloaded, the router can't handle the chaos and just freezes! This stack overflow vulnerability allows attackers to send specially crafted requests that exploit the time parameter in the SetSysTimeCfg function, causing the device to crash and stop functioning properly.

What to do

An attacker could exploit this vulnerability to flood your device with crafted requests, leading to a complete Denial of Service. This means your network could go down, leaving you and your users with disrupted service and a potential loss of access to the internet. Not ideal! To mitigate this vulnerability, update your Tenda AX-1803 to the latest firmware version immediately. Regularly check for updates and be sure to monitor your network for any suspicious activity. Protecting your network is key! You've got this! By taking these steps, you can secure your device and keep your network running smoothly. 🛡️

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00397 · 32.7th percentile
Published
2025-11-10T00:00Z
EPSS history
Timeline
  • 10 NOV 00:00Z
    Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the time parameter in the SetSysTimeCfg function
    cvelistv5