CVE-2025-63457

Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the wanMTU parameter in the sub_4F55C function

Medium · published November 10, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
32.7
In the wild
Unconfirmed
What it is

⚠️ A crafty request can bring your Tenda AX-1803 to a standstill! The stack overflow lurking in the wanMTU parameter is a sneaky way for attackers to trigger a Denial of Service. 🔥 Think of it like a traffic jam caused by a poorly planned road construction; one wrong turn can block the entire road, leaving everyone stuck. This vulnerability acts like that confusing construction sign, leading requests into a stack overflow and halting service for everyone. An attacker could exploit this vulnerability to send a specifically crafted request, causing your router to crash and leaving your network in the lurch. While this does not allow for data theft, the Denial of Service can disrupt connectivity and frustrate users.

Put simply

Think of it like a traffic jam caused by a poorly planned road construction; one wrong turn can block the entire road, leaving everyone stuck. This vulnerability acts like that confusing construction sign, leading requests into a stack overflow and halting service for everyone. This vulnerability stems from a stack overflow in the sub_4F55C function related to the wanMTU parameter, allowing attackers to create conditions that lead to a service outage.

What to do

An attacker could exploit this vulnerability to send a specifically crafted request, causing your router to crash and leaving your network in the lurch. While this does not allow for data theft, the Denial of Service can disrupt connectivity and frustrate users. To secure your network, update your Tenda AX-1803 to the latest firmware version available. Regularly monitor for updates and review configurations to prevent crafted requests from overwhelming your system. You've got this! With a quick update and a bit of vigilance, you can keep your network running smoothly. 🛡️

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00397 · 32.7th percentile
Published
2025-11-10T00:00Z
EPSS history
Timeline
  • 10 NOV 00:00Z
    Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the wanMTU parameter in the sub_4F55C function
    cvelistv5