CVE-2025-70646

Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub_72290 function

High · published January 21, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
29.7
In the wild
Unconfirmed
What it is

⚡ A crafted request is all it takes to trigger a stack overflow in the Tenda AX1803! This can lead to a catastrophic Denial of Service. 🔥 Think of it like a restaurant where a single disgruntled customer shouts an order so outrageous that it overwhelms the kitchen staff, causing them to freeze and not serve anyone else. That's the chaos this vulnerability can unleash on your network! An attacker can exploit this vulnerability to bring your entire device to a standstill, leaving legitimate users out in the cold. Imagine your internet connection grinding to a halt, unable to serve users or connect to important services—absolutely devastating!

Put simply

Think of it like a restaurant where a single disgruntled customer shouts an order so outrageous that it overwhelms the kitchen staff, causing them to freeze and not serve anyone else. That's the chaos this vulnerability can unleash on your network! The vulnerability in Tenda AX1803 arises from a stack overflow in the security parameter of the sub_72290 function, allowing attackers to send crafted requests that can trigger a Denial of Service condition.

What to do

An attacker can exploit this vulnerability to bring your entire device to a standstill, leaving legitimate users out in the cold. Imagine your internet connection grinding to a halt, unable to serve users or connect to important services—absolutely devastating! Patch your Tenda AX1803 to version 1.0.0.2 or later immediately to close this vulnerability. Consider reinforcing your firewall rules to filter out any suspicious requests. Regularly monitor logs to detect any unusual activity that might suggest an attempted exploit. You’ve got this! Follow these steps, and you’ll keep your network running smoothly and securely! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00370 · 29.7th percentile
Published
2026-01-21T00:00Z
EPSS history
Timeline
  • 21 JAN 00:00Z
    Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub_72290 function
    cvelistv5