CVE-2025-70656

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the mac parameter of the sub_65B5C function

High · published January 15, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
29.7
In the wild
Unconfirmed
What it is

⚡ A crafty request can trigger a stack overflow in the Tenda AX-1806, turning your device into a Denial of Service nightmare! 🔥 Think of it like a traffic jam caused by a single vehicle that breaks down at a crucial intersection — everything behind it gets stuck, unable to move. This stack overflow behaves similarly, causing your device to become unresponsive and affect the entire network. In practical terms, an attacker could send a specially crafted request that crashes your Tenda router, leaving all connected devices without internet access. This means not just inconvenience, but potentially significant downtime for your online operations or leisure activities.

Put simply

Think of it like a traffic jam caused by a single vehicle that breaks down at a crucial intersection — everything behind it gets stuck, unable to move. This stack overflow behaves similarly, causing your device to become unresponsive and affect the entire network. This vulnerability in Tenda AX-1806 (v1.0.0.1) occurs due to an unchecked input in the mac parameter of the sub_65B5C function, leading to a stack overflow. Attackers can exploit this to crash the router, resulting in a Denial of Service (DoS).

What to do

In practical terms, an attacker could send a specially crafted request that crashes your Tenda router, leaving all connected devices without internet access. This means not just inconvenience, but potentially significant downtime for your online operations or leisure activities. To mitigate this vulnerability, update your Tenda AX-1806 to the latest firmware version available from the manufacturer's website. Additionally, consider implementing proper network segmentation and monitoring to spot any unusual traffic patterns that could indicate an attempted exploit. You've got this! With these steps, you can secure your network and ensure smooth sailing ahead. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00370 · 29.7th percentile
Published
2026-01-15T00:00Z
EPSS history
Timeline
  • 15 JAN 00:00Z
    Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the mac parameter of the sub_65B5C function
    cvelistv5