CVE-2025-71023

Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the mac2 parameter of the fromAdvSetMacMtuWan function

High · published January 13, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
38.6
In the wild
Unconfirmed
What it is

⚡ A crafty request could bring your Tenda AX-3 to its knees! This stack overflow in the mac2 parameter can lead to a Denial of Service (DoS) like a traffic jam that halts online traffic altogether. 🚧 Think of your network as a bustling restaurant. A single table ordering an excessive amount of food can back up the kitchen, leading to unhappy diners and empty plates. This stack overflow is like a massive order that clogs up the kitchen, leaving everyone waiting at the door. The consequences of this vulnerability are significant: an attacker could send a specially crafted request that overwhelms the router, causing it to crash and leaving your internet service inaccessible. This means disrupted connectivity for everyone relying on it, an absolute nightmare for any network!

Put simply

Think of your network as a bustling restaurant. A single table ordering an excessive amount of food can back up the kitchen, leading to unhappy diners and empty plates. This stack overflow is like a massive order that clogs up the kitchen, leaving everyone waiting at the door. The vulnerability exists in the Tenda AX-3 router's handling of the mac2 parameter within the fromAdvSetMacMtuWan function, where a maliciously crafted request can trigger a stack overflow, resulting in a Denial of Service.

What to do

The consequences of this vulnerability are significant: an attacker could send a specially crafted request that overwhelms the router, causing it to crash and leaving your internet service inaccessible. This means disrupted connectivity for everyone relying on it, an absolute nightmare for any network! To protect your network, update your Tenda AX-3 to the latest firmware version that addresses this vulnerability. Additionally, consider implementing network monitoring to quickly identify unusual traffic patterns. Staying proactive can help you dodge this bullet! You've got this! Stay vigilant and patch that firmware to keep your network running smoothly. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00456 · 38.6th percentile
Published
2026-01-13T00:00Z
EPSS history
Timeline
  • 13 JAN 00:00Z
    Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the mac2 parameter of the fromAdvSetMacMtuWan function
    cvelistv5