CVE-2025-71021

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serverName parameter of the sub_65A28 function

High · published January 14, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
38.7
In the wild
Unconfirmed
What it is

⚡ A clever crafted request can trigger a stack overflow in Tenda AX-1806 v1.0.0.1, leaving your devices down for the count! Think of it like a delivery truck trying to squeeze through an impossibly narrow alley – it gets stuck, blocking all traffic behind it. This vulnerability is just as sneaky, causing a Denial of Service by overwhelming the server. An attacker could exploit this vulnerability, leading to a complete service interruption. Imagine your network going dark, cutting off access to all devices and disrupting your daily activities. The consequences can be absolutely devastating!

Put simply

Think of it like a delivery truck trying to squeeze through an impossibly narrow alley – it gets stuck, blocking all traffic behind it. This vulnerability is just as sneaky, causing a Denial of Service by overwhelming the server. This vulnerability arises from a stack overflow in the serverName parameter of the sub_65A28 function, allowing attackers to send a specially crafted request that the system can't handle, ultimately triggering a DoS condition.

What to do

An attacker could exploit this vulnerability, leading to a complete service interruption. Imagine your network going dark, cutting off access to all devices and disrupting your daily activities. The consequences can be absolutely devastating! To protect yourself, immediately update your Tenda AX-1806 to the latest firmware version. Regularly audit your network settings and implement rate limiting to restrict suspicious requests. Keeping your devices patched is key! You've got this! Follow these steps, and you'll have your network back under control in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00458 · 38.7th percentile
Published
2026-01-14T00:00Z
EPSS history
Timeline
  • 14 JAN 00:00Z
    Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serverName parameter of the sub_65A28 function
    cvelistv5