Tenda Ax3 Firmware vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Tenda Ax3 Firmware: 16 record(s), with affected versions and fixes.cpe:2.3:o:tenda:ax3_firmware
CVE-2025-69765
High · 7.5
CWE-121 Mar 3, 2026
Stack-based Buffer Overflow in Tenda Ax3 Firmware
Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formGetIptv function and the list parameter, which can cause memory corruption and enable remote code execution.
CVE-2025-69764
Critical · 9.8
CWE-121 Jan 22, 2026
Stack-based Buffer Overflow in Tenda Ax3 Firmware
Tenda AX3 firmware v16.03.12.11 contains a stack-based buffer overflow in the formGetIptv function due to improper handling of the stbpvid stack buffer, which may result in memory corruption and remote code execution.
CVE-2025-69766
Critical · 9.8
CWE-121 Jan 21, 2026
Stack-based Buffer Overflow in Tenda Ax3 Firmware
Tenda AX3 firmware v16.03.12.11 contains a stack-based buffer overflow in the formGetIptv function due to improper handling of the citytag stack buffer, which may result in memory corruption and remote code execution.
CVE-2025-69763
Critical · 9.8
CWE-121 Jan 21, 2026
Stack-based Buffer Overflow in Tenda Ax3 Firmware
Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formSetIptv via the vlanId parameter, which can cause memory corruption and enable remote code execution.
CVE-2025-69762
Critical · 9.8
CWE-121 Jan 21, 2026
Stack-based Buffer Overflow in Tenda Ax3 Firmware
Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formSetIptv via the list parameter, which can cause memory corruption and enable remote code execution.
CVE-2025-71027
High · 7.5
CWE-787 Jan 13, 2026
Out-of-bounds Write in Tenda Ax3 Firmware
Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the wanMTU2 parameter of the fromAdvSetMacMtuWan function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-71026
High · 7.5
CWE-787 Jan 13, 2026
Out-of-bounds Write in Tenda Ax3 Firmware
Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the wanSpeed2 parameter of the fromAdvSetMacMtuWan function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-71025
High · 7.5
CWE-787 Jan 13, 2026
Out-of-bounds Write in Tenda Ax3 Firmware
Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the cloneType2 parameter of the fromAdvSetMacMtuWan function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-71024
High · 7.5
CWE-787 Jan 13, 2026
Out-of-bounds Write in Tenda Ax3 Firmware
Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the serviceName2 parameter of the fromAdvSetMacMtuWan function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-71023
High · 7.5
CWE-121 Jan 13, 2026
Stack-based Buffer Overflow in Tenda Ax3 Firmware
Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the mac2 parameter of the fromAdvSetMacMtuWan function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-65804
Medium · 6.5
CWE-121 Dec 8, 2025
Tenda AX3 v16.03.12.11 contains a stack overflow in formSetIptv via the iptvType parameter, which...
Tenda AX3 v16.03.12.11 contains a stack overflow in formSetIptv via the iptvType parameter, which can cause memory corruption and enable remote code execution (RCE).
CVE-2025-63149
High · 7.5
CWE-121 Nov 10, 2025
Stack-based Buffer Overflow in Tenda Ax3 Firmware
Tenda AX3 V16.03.12.10_CN was discovered to contain a stack overflow in the urls parameter of the get_parentControl_list_Info function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-63455
High · 7.5
CWE-121 Nov 10, 2025
Stack-based Buffer Overflow in Tenda Ax3 Firmware
Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow via the shareSpeed parameter in the fromSetWifiGusetBasic function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-63147
High · 7.5
CWE-787 Nov 10, 2025
Out-of-bounds Write in Tenda Ax3 Firmware
Tenda AX3 V16.03.12.10_CN was discovered to contain a stack overflow in the deviceId parameter of the saveParentControlInfo function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-63152
High · 7.5
CWE-121 Nov 10, 2025
Stack-based Buffer Overflow in Tenda Ax3 Firmware
Tenda AX3 V16.03.12.10_CN was discovered to contain a stack overflow in the wpapsk_crypto parameter of the wlSetExternParameter function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-63454
High · 7.5
CWE-121 Oct 31, 2025
Stack-based Buffer Overflow in Tenda Ax3 Firmware
Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow via the deviceId parameter in the get_parentControl_list_Info function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.