CVE-2025-70648

Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow in the security_5g parameter of the sub_727F4 function

High · published January 21, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
29.7
In the wild
Unconfirmed
What it is

⚡ A crafted request can turn your Tenda AX1803 into a no-show! This stack overflow vulnerability in the security_5g parameter is a ticket to chaos for your network. 🔥 Think of it like a hotel that crashes under the weight of too many guests trying to check in at once — if the system isn’t built to handle the crowd, it all comes to a halt! An attacker can leverage this stack overflow to trigger a Denial of Service (DoS), effectively knocking your router offline and leaving your network vulnerable and exposed. This means your devices will be unable to connect, cutting off communication and access when you need it the most!

Put simply

Think of it like a hotel that crashes under the weight of too many guests trying to check in at once — if the system isn’t built to handle the crowd, it all comes to a halt! This vulnerability exists in the security_5g parameter of the sub_727F4 function, where improper handling of input can lead to a stack overflow, causing the device to crash under certain conditions.

What to do

An attacker can leverage this stack overflow to trigger a Denial of Service (DoS), effectively knocking your router offline and leaving your network vulnerable and exposed. This means your devices will be unable to connect, cutting off communication and access when you need it the most! Update your Tenda AX1803 firmware to version 1.0.0.2 or later immediately. If that’s not available, implement access controls or rate limiting on requests to mitigate the risk. Stay alert for any notices from Tenda regarding this issue! You've got this! Follow these steps, and you'll be back in the game with a secure and reliable network in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00370 · 29.7th percentile
Published
2026-01-21T00:00Z
EPSS history
Timeline
  • 21 JAN 00:00Z
    Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow in the security_5g parameter of the sub_727F4 function
    cvelistv5