CVE-2025-70656

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the mac parameter of the sub65B5C function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-70656

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the mac parameter of the sub65B5C function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

Tenda AX1806 安全漏洞

The Tenda AX1806 is a WiFi6 wireless router from Tenda China. The Tenda AX1806 suffers from a stack buffer overflow vulnerability that stems from the mac parameter of the sub65B5C function failing to properly validate the length size of the input data, which can be exploited by an attacker to cau...

EUVD-2026-2744

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the mac parameter of the sub65B5C function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-70656

The CVE-2025-70656 entry affects the Tenda AX-1806 router (v1.0.0.1). A stack overflow is present in the mac parameter of the sub_65B5C function, enabling Denial of Service (DoS) via a crafted request. The available documents cite a CVSSv3.1 base score of 7.5 (HIGH) with network as the attack vec...

CVE-2025-70656

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the mac parameter of the sub65B5C function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-70656

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the mac parameter of the sub65B5C function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-70656

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the mac parameter of the sub65B5C function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

PT-2026-3068

Name of the Vulnerable Software and Affected Versions Tenda AX-1806 version 1.0.0.1 Description A stack overflow exists in the mac parameter of the sub 65B5C function within the Tenda AX-1806. A crafted request can trigger this issue, leading to a Denial of Service DoS. Recommendations Update to ...

CVE-2023-49428

Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName...

CVE-2023-49431

Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName...

CVE-2018-10329

app/tools/mac-lookup/index.php in phpIPAM 1.3.1 has Reflected XSS on /tools/mac-lookup/ via the mac parameter...

CVE-2022-37810

Tenda AC1206 V15.03.06.23 was discovered to contain a command injection vulnerability via the mac parameter in the function formWriteFacMac...

Tenda M3 /goform/setAdPushInfo File Stack Buffer Overflow Vulnerability

Tenda M3 is a wireless controller AC from Tenda, which is aimed at scenarios such as hotel chains, low-star hotels and small and medium-sized businesses. Tenda M3 has a stack buffer overflow vulnerability, the vulnerability stems from the incorrect operation of the parameter mac/terminal in the...

Tenda AC18 安全漏洞

Tenda AC18 is a router from Tenda China. A security vulnerability exists in Tenda AC18 version 15.03.05.05, which originates from an improper handling of the parameter mac in the strcpy function of the file /goform/GetParentControlInfo in the component HTTP Request Handler, which may result in a...

CVE-2025-13800

A vulnerability was found in ADSLR NBR1005GPEV2 250814-r037c. This issue affects the function setmeshdisconnect of the file /sendorder.cgi. The manipulation of the argument mac results in command injection. It is possible to launch the attack remotely. The exploit has been made public and could b...

CVE-2025-13799

A vulnerability has been found in ADSLR NBR1005GPEV2 250814-r037c. This vulnerability affects the function apmacfilterdel of the file /sendorder.cgi. The manipulation of the argument mac leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to...

CVE-2025-13798

A flaw has been found in ADSLR NBR1005GPEV2 250814-r037c. This affects the function apmacfilteradd of the file /sendorder.cgi. Executing manipulation of the argument mac can lead to command injection. The attack may be performed from remote. The exploit has been published and may be used. The...

CVE-2025-13800

A vulnerability was found in ADSLR NBR1005GPEV2 250814-r037c. This issue affects the function setmeshdisconnect of the file /sendorder.cgi. The manipulation of the argument mac results in command injection. It is possible to launch the attack remotely. The exploit has been made public and could b...

CVE-2025-13800 ADSLR NBR1005GPEV2 send_order.cgi set_mesh_disconnect command injection

A vulnerability was found in ADSLR NBR1005GPEV2 250814-r037c. This issue affects the function setmeshdisconnect of the file /sendorder.cgi. The manipulation of the argument mac results in command injection. It is possible to launch the attack remotely. The exploit has been made public and could b...