CVE-2025-70753

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security_5g parameter of the sub_4CA50 function

High · published January 13, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
38.6
In the wild
Unconfirmed
What it is

⚡ A crafty request can trigger a stack overflow in Tenda AX-1806, putting your 5G network at risk of crashing! Think of it like a restaurant that overbooks tables without checking if they can handle the crowd — eventually, it just can't serve anyone, and chaos ensues. In this case, the crafted request overloads the system, causing it to fail entirely! If exploited, this vulnerability could lead to a Denial of Service (DoS), shutting down your internet connection and leaving you offline until it's resolved. It's like your favorite café suddenly running out of coffee — a complete halt to your productivity!

Put simply

Think of it like a restaurant that overbooks tables without checking if they can handle the crowd — eventually, it just can't serve anyone, and chaos ensues. In this case, the crafted request overloads the system, causing it to fail entirely! This vulnerability occurs in the security_5g parameter of the sub_4CA50 function, where a stack overflow allows an attacker to send a specially crafted request that overwhelms the system.

What to do

If exploited, this vulnerability could lead to a Denial of Service (DoS), shutting down your internet connection and leaving you offline until it's resolved. It's like your favorite café suddenly running out of coffee — a complete halt to your productivity! To protect your network, immediately patch your Tenda AX-1806 to version 1.0.0.2 or higher. Additionally, regularly review and limit incoming requests to prevent potential exploitation. Staying updated is key! You've got this! With these steps, you’ll ensure your network stays up and running smoothly. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00456 · 38.6th percentile
Published
2026-01-13T00:00Z
EPSS history
Timeline
  • 13 JAN 00:00Z
    Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security_5g parameter of the sub_4CA50 function
    cvelistv5