CVE-2025-70644

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the time parameter of the sub_60CFC function

High · published January 21, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
29.7
In the wild
Unconfirmed
What it is

⚡ A crafty stack overflow in Tenda AX-1806 could knock your network offline with just a cleverly crafted request! Think of this vulnerability like a restaurant that overbooks its tables. When too many guests arrive at once, they're left waiting outside, unable to get in — just like your users who will be locked out when this DoS attack strikes! If an attacker exploits this vulnerability, they can cause your router to crash, rendering your devices unable to connect to the internet. This could lead to significant downtime and frustration for everyone relying on your network — absolutely devastating!

Put simply

Think of this vulnerability like a restaurant that overbooks its tables. When too many guests arrive at once, they're left waiting outside, unable to get in — just like your users who will be locked out when this DoS attack strikes! The stack overflow occurs in the time parameter of the sub_60CFC function, allowing attackers to send specially crafted requests that overwhelm the system and trigger a Denial of Service (DoS).

What to do

If an attacker exploits this vulnerability, they can cause your router to crash, rendering your devices unable to connect to the internet. This could lead to significant downtime and frustration for everyone relying on your network — absolutely devastating! To protect against this, patch your Tenda AX-1806 to version 1.0.0.2 or later as soon as possible. Additionally, consider implementing rate limiting on incoming requests to help mitigate potential attacks in the future. You've got this! Follow these steps and get your network back on track in no time. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00370 · 29.7th percentile
Published
2026-01-21T00:00Z
EPSS history
Timeline
  • 21 JAN 00:00Z
    Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the time parameter of the sub_60CFC function
    cvelistv5