CVE-2025-70747

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serviceName parameter of the sub_65A28 function

High · published January 14, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
46.2
In the wild
Unconfirmed
What it is

⚡ A single crafted request can trigger a stack overflow right in Tenda AX-1806 v1.0.0.1, bringing your network to a standstill! 🔥 Think of it like a restaurant jammed with too many orders at once, leading to chaos in the kitchen — that’s what happens when the serviceName parameter is overstuffed! An attacker could exploit this vulnerability to create a Denial of Service (DoS), causing your router to crash and leaving your network offline until you reboot it. This means no internet for all your devices — absolutely devastating when you rely on connectivity for work or fun!

Put simply

Think of it like a restaurant jammed with too many orders at once, leading to chaos in the kitchen — that’s what happens when the serviceName parameter is overstuffed! The vulnerability arises from a stack overflow in the serviceName parameter of the sub_65A28 function, allowing attackers to send specially crafted requests that overwhelm the system.

What to do

An attacker could exploit this vulnerability to create a Denial of Service (DoS), causing your router to crash and leaving your network offline until you reboot it. This means no internet for all your devices — absolutely devastating when you rely on connectivity for work or fun! To protect against this DoS vulnerability, update your Tenda AX-1806 to the latest firmware version as soon as it becomes available. Regularly check for updates and consider applying additional network monitoring solutions to catch suspicious requests early. 🛡️ You’ve got this! Stay ahead of vulnerabilities, and your network will be stronger than ever! 💪😊

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00565 · 46.2th percentile
Published
2026-01-14T00:00Z
EPSS history
Timeline
  • 14 JAN 00:00Z
    Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serviceName parameter of the sub_65A28 function
    cvelistv5