CVE-2025-70744

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the cloneType parameter of the sub_65B5C function

High · published January 15, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
29.7
In the wild
Unconfirmed
What it is

⚡ A single crafted request can trigger it — a stack overflow lurking in Tenda AX-1806 v1.0.0.1's cloneType parameter! 🔥 Think of this vulnerability as a restaurant where one overly ambitious dish recipe spills over and causes chaos in the kitchen, disrupting service for everyone. When the overflow happens, it’s like a whole restaurant suddenly shutting down because of a single bad order! An attacker can unleash this stack overflow to cause a Denial of Service (DoS), effectively bringing the Tenda device to its knees. This could leave your network vulnerable and without service, impacting any devices relying on it. If exploited, it could disrupt your entire internet connection!

Put simply

Think of this vulnerability as a restaurant where one overly ambitious dish recipe spills over and causes chaos in the kitchen, disrupting service for everyone. When the overflow happens, it’s like a whole restaurant suddenly shutting down because of a single bad order! This vulnerability exists within the sub_65B5C function of the Tenda AX-1806 and can be triggered by manipulating the cloneType parameter, leading to a stack overflow that crashes the service.

What to do

An attacker can unleash this stack overflow to cause a Denial of Service (DoS), effectively bringing the Tenda device to its knees. This could leave your network vulnerable and without service, impacting any devices relying on it. If exploited, it could disrupt your entire internet connection! Update your Tenda AX-1806 to the latest firmware version immediately to patch this vulnerability. Ensure you monitor network requests for unusual patterns that could indicate an attempted exploit. Regularly review your security settings and practices! You've got this! Follow these steps and keep your network safe and sound! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00370 · 29.7th percentile
Published
2026-01-15T00:00Z
EPSS history
Timeline
  • 15 JAN 00:00Z
    Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the cloneType parameter of the sub_65B5C function
    cvelistv5