Ax1803 Firmware CVE-2025-70646

HIGH

Stack-based Buffer Overflow (CWE-121)

2026-01-21 cve@mitre.org

Stack Overflow Denial Of Service Ax1803 Firmware Tenda

7.5

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

3

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

PoC Detected

Jan 26, 2026 - 21:00 vuln.today

Public exploit code

CVE Published

Jan 21, 2026 - 17:16 nvd

HIGH 7.5

DescriptionCVE.org

Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub_72290 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

AnalysisAI

Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub_72290 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request. [CVSS 7.5 HIGH]

Technical ContextAI

Classified as CWE-121 (Stack-based Buffer Overflow). Affects the security component of Ax1803 Firmware. Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub_72290 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

RemediationAI

Monitor vendor advisories for a patch. Restrict network access to the affected service where possible.

More in Ax1803 Firmware

View all

CVE-2023-51972 CRITICAL Act Now POC

Tenda AX1803 v1.0.0.1 was discovered to contain a command injection vulnerability via the function fromAdvSetLanIp. Rate

CVE-2023-51970 CRITICAL Act Now POC

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv. Rated criti

CVE-2023-51969 CRITICAL Act Now POC

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function getIptvInfo. Rated crit

CVE-2023-51968 CRITICAL Act Now POC

Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function getIptvInfo. Rate

CVE-2023-51967 CRITICAL Act Now POC

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function getIptvInfo. Rated criti

CVE-2023-51962 CRITICAL Act Now POC

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function setIptvInfo. Rated criti

CVE-2023-51963 CRITICAL Act Now POC

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function setIptvInfo. Rated crit

CVE-2023-51965 CRITICAL Act Now POC

Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function setIptvInfo. Rated cr

CVE-2023-51964 CRITICAL Act Now POC

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function setIptvInfo. Rated criti

CVE-2023-51960 CRITICAL Act Now POC

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formGetIptv. Rated crit

CVE-2023-51959 CRITICAL Act Now POC

Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formGetIptv. Rated cr

CVE-2023-51958 CRITICAL Act Now POC

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formGetIptv. Rated criti

Same weakness CWE-121 – Stack-based Buffer Overflow

View all

CVE-2025-0282 CRITICAL POC

CVE-2025-22457 CRITICAL POC

CVE-2012-10060 CRITICAL POC

CVE-2012-10053 CRITICAL POC

CVE-2013-10064 CRITICAL POC

CVE-2012-10023 MEDIUM POC

CVE-2012-10058 CRITICAL POC

CVE-2013-10068 CRITICAL POC

Same technique Stack Overflow

View all

CVE-2025-0282 CRITICAL POC

CVE-2025-22457 CRITICAL POC

CVE-2012-10060 CRITICAL POC

CVE-2012-10053 CRITICAL POC

CVE-2013-10064 CRITICAL POC

CVE-2012-10023 MEDIUM POC

CVE-2012-10058 CRITICAL POC

CVE-2013-10068 CRITICAL POC

Share

CVE-2025-70646 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy