CVE-2025-71024

Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the serviceName2 parameter of the fromAdvSetMacMtuWan function

High · published January 13, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
38.3
In the wild
Unconfirmed
What it is

⚡ A stack overflow in the Tenda AX-3 could leave your network high and dry! A single malformed request is all it takes to trigger a denial of service. 🚨 Think of it like a restaurant having too many orders come in at once; instead of serving each plate, the kitchen gets overwhelmed and can’t serve anyone. That’s how this vulnerability floods the router, causing it to stop responding altogether. If exploited, an attacker can bring down the entire device, rendering your network useless until it’s reset—absolutely devastating for any home or office relying on that connection! The disruption could last for as long as the device remains unresponsive, affecting all connected users.

Put simply

Think of it like a restaurant having too many orders come in at once; instead of serving each plate, the kitchen gets overwhelmed and can’t serve anyone. That’s how this vulnerability floods the router, causing it to stop responding altogether. This vulnerability is a stack overflow in the serviceName2 parameter of the fromAdvSetMacMtuWan function. By sending a specially crafted request, an attacker can trigger a denial of service condition on the device.

What to do

If exploited, an attacker can bring down the entire device, rendering your network useless until it’s reset—absolutely devastating for any home or office relying on that connection! The disruption could last for as long as the device remains unresponsive, affecting all connected users. To protect your network, update your Tenda AX-3 router to version 16.03.12.11_CN or later immediately. Also, consider monitoring incoming requests for anomalies to add an extra layer of security. You've got this! Following these steps will help you safeguard your network in no time. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00456 · 38.3th percentile
Published
2026-01-13T00:00Z
EPSS history
Timeline
  • 13 JAN 00:00Z
    Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the serviceName2 parameter of the fromAdvSetMacMtuWan function
    cvelistv5