PT-2025-46179

Name of the Vulnerable Software and Affected Versions Tenda AX-3 version 16.03.12.10 CN Description The Tenda AX-3 device contains a stack overflow issue through the shareSpeed parameter within the fromSetWifiGusetBasic function. A crafted request can lead to a Denial of Service DoS...

Tenda AX3 安全漏洞

Tenda AX3 is a home dual-band Gigabit wireless router from Tenda Technology that supports Wi-Fi6 802.11ax standard and focuses on high-performance network coverage and stable connection. The Tenda AX3 suffers from a stack buffer overflow vulnerability that originates from the wpapskcrypto paramet...

CVE-2025-63149

Tenda AX3 V16.03.12.10CN was discovered to contain a stack overflow in the urls parameter of the getparentControllistInfo function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-63457

CVE-2025-63457 affects Tenda AX-1803 v1.0.0.1. The issue is a stack overflow in the wanMTU parameter within the sub_4F55C function, caused by insufficient input data length validation. This vulnerability can be triggered by a crafted request, enabling a Denial of Service (DoS). Public sources des...

Tenda AX-3 安全漏洞

Tenda AX3 is a home dual-band Gigabit wireless router from Tenda Technology that supports Wi-Fi6 802.11ax standard and focuses on high-performance network coverage and stable connection. The Tenda AX3 suffers from a stack buffer overflow vulnerability that originates from the shareSpeed parameter...

CVE-2025-63835

The CVE-2025-63835 entry concerns a stack-based buffer overflow in the Tenda AC18 (v15.03.05.05_multi) guestSsid parameter of the /goform/WifiGuestSet interface. The issue arises from insufficient validation of the guestSsid length, allowing an attacker to send oversized data that can cause a dev...

PT-2025-46175

Name of the Vulnerable Software and Affected Versions Tenda AX-1803 version 1.0.0.1 Description The Tenda AX-1803 version 1.0.0.1 contains a stack overflow issue. This occurs through the time parameter within the SetSysTimeCfg function. A crafted request targeting this parameter can lead to a...

CVE-2025-63456

CVE-2025-63456 concerns the Tenda AX-1803 router (v1.0.0.1) with a stack overflow in the SetSysTimeCfg function triggered by the time parameter. The issue is a stack buffer overflow/length validation flaw that can be exploited by sending a crafted request to cause Denial of Service (DoS). Multipl...

CVE-2025-63456

Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the time parameter in the SetSysTimeCfg function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-63835

A stack-based buffer overflow vulnerability was discovered in Tenda AC18 v15.03.05.05multi. The vulnerability exists in the guestSsid parameter of the /goform/WifiGuestSet interface. Remote attackers can exploit this vulnerability by sending oversized data to the guestSsid parameter, leading to...

CVE-2025-63147

Tenda AX3 V16.03.12.10CN was discovered to contain a stack overflow in the deviceId parameter of the saveParentControlInfo function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

PT-2025-46176

Name of the Vulnerable Software and Affected Versions Tenda AC18 version 15.03.05.05 multi Description A stored cross-site scripting XSS issue exists in Tenda AC18. The issue is located in the ssid parameter within the wireless settings. An attacker can inject malicious payloads that will execute...

PT-2025-46173

Name of the Vulnerable Software and Affected Versions Tenda AX-1803 version 1.0.0.1 Description The Tenda AX-1803 version 1.0.0.1 contains a stack overflow issue. This occurs through the wanMTU parameter within the sub 4F55C function. A crafted request can trigger this, leading to a Denial of...

CVE-2025-63834

A stored cross-site scripting XSS vulnerability was discovered in Tenda AC18 v15.03.05.05multi. The vulnerability exists in the ssid parameter of the wireless settings. Remote attackers can inject malicious payloads that execute when any user visits the router's homepage...

CVE-2025-63152

Tenda AX3 V16.03.12.10CN was discovered to contain a stack overflow in the wpapskcrypto parameter of the wlSetExternParameter function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

Tenda AX3 安全漏洞

Tenda AX3 is a home dual-band Gigabit wireless router from Tenda Technology that supports Wi-Fi6 802.11ax standard and focuses on high-performance network coverage and stable connection. The Tenda AX3 suffers from a stack buffer overflow vulnerability, which stems from the deviceId parameter of t...

PT-2025-46177

Name of the Vulnerable Software and Affected Versions Tenda AC18 version 15.03.05.05 multi Description A stack-based buffer overflow issue exists in Tenda AC18 version 15.03.05.05 multi. The issue is located in the guestSsid parameter of the /goform/WifiGuestSet API endpoint. Sending oversized da...

CVE-2025-63149

CVE-2025-63149 affects Tenda AX3 router (V16.03.12.10_CN). The vulnerability is a stack overflow in the urls parameter of the get_parentControl_list_Info function, caused by improper input length validation. This can be exploited by a crafted request to trigger a Denial of Service (DoS). Public s...

CVE-2025-63149

Tenda AX3 V16.03.12.10CN was discovered to contain a stack overflow in the urls parameter of the getparentControllistInfo function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

Tenda AX-1803 安全漏洞

Tenda AX-1803 is a dual-band Gigabit WiFi6 wireless router from Tenda that supports dual bands of 2.4GHz and 5GHz with a maximum transmission rate of 1774Mbps for home or small office scenarios. The Tenda AX-1803 suffers from a stack buffer overflow vulnerability that originates from the wanMTU...