CVE-2025-71027

Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the wanMTU2 parameter of the fromAdvSetMacMtuWan function

High · published January 13, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
38.6
In the wild
Unconfirmed
What it is

⚡ A stack overflow in Tenda AX-3 could turn your network into a ghost town! This juicy vulnerability can trigger a Denial of Service with just one crafty request. 🔥 Think of it like a traffic jam caused by a single oversized vehicle blocking the road — suddenly, nobody can get through. This vulnerability clogs up the network, halting all communication like a line of cars stuck behind an immovable truck! An attacker can exploit this vulnerability to send a specially crafted request that overwhelms your device, leading to a complete Denial of Service. This means your internet could go down, leaving you completely disconnected and unable to access crucial services. Imagine trying to stream your favorite show, only to be met with a black screen!

Put simply

Think of it like a traffic jam caused by a single oversized vehicle blocking the road — suddenly, nobody can get through. This vulnerability clogs up the network, halting all communication like a line of cars stuck behind an immovable truck! This vulnerability in Tenda AX-3's `fromAdvSetMacMtuWan` function allows for stack overflow caused by improper handling of the `wanMTU2` parameter, creating a potential crash scenario for the device.

What to do

An attacker can exploit this vulnerability to send a specially crafted request that overwhelms your device, leading to a complete Denial of Service. This means your internet could go down, leaving you completely disconnected and unable to access crucial services. Imagine trying to stream your favorite show, only to be met with a black screen! To mitigate this risk, update your Tenda AX-3 to the latest firmware version as soon as it's available. Regularly check for updates and consider implementing network security measures to filter out malformed requests. Don't let your network fall victim to unnecessary downtime! You've got this! Stay proactive and keep your network safe with those updates. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00456 · 38.6th percentile
Published
2026-01-13T00:00Z
EPSS history
Timeline
  • 13 JAN 00:00Z
    Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the wanMTU2 parameter of the fromAdvSetMacMtuWan function
    cvelistv5