CVE-2025-70651

Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow in the ssid parameter of the form_fast_setting_wifi_set function

High · published January 21, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
29.7
In the wild
Unconfirmed
What it is

⚡ Tenda's AX-1803 has a sneaky stack overflow lurking in the ssid parameter that could take your WiFi service down with just one crafty request! Think of this like a restaurant's order system that crashes if a customer sends a ridiculously long wishlist — the waiter just can't handle it. Instead of serving up the internet, the request causes chaos, leaving you and your users disconnected! If exploited, this vulnerability could lead to a Denial of Service (DoS), meaning your WiFi could become unreachable, leaving your devices with no connection and users frustrated. It's a high-stakes game where a simple crafted request could knock your network offline, impacting productivity and connectivity.

Put simply

Think of this like a restaurant's order system that crashes if a customer sends a ridiculously long wishlist — the waiter just can't handle it. Instead of serving up the internet, the request causes chaos, leaving you and your users disconnected! This stack overflow vulnerability exists in the `form_fast_setting_wifi_set` function of Tenda AX-1803 version 1.0.0.1, allowing attackers to crash the service by sending overly long input in the ssid parameter.

What to do

If exploited, this vulnerability could lead to a Denial of Service (DoS), meaning your WiFi could become unreachable, leaving your devices with no connection and users frustrated. It's a high-stakes game where a simple crafted request could knock your network offline, impacting productivity and connectivity. To protect against this vulnerability, immediately update the Tenda AX-1803 to the latest firmware version. Additionally, limit the length of inputs and validate all incoming requests to safeguard against similar overflows in the future. You've got this! Follow these steps, and your WiFi will be back to serving smoothly in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00370 · 29.7th percentile
Published
2026-01-21T00:00Z
EPSS history
Timeline
  • 21 JAN 00:00Z
    Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow in the ssid parameter of the form_fast_setting_wifi_set function
    cvelistv5