Vulnerabilidades do Tenda Ax3 Firmware

CVE-2025-69765 Alta · 7.5 CWE-121 03/03/2026

Stack-based Buffer Overflow em Tenda Ax3 Firmware

Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formGetIptv function and the list parameter, which can cause memory corruption and enable remote code execution.

CVE-2025-69764 Crítica · 9.8 CWE-121 22/01/2026

Stack-based Buffer Overflow em Tenda Ax3 Firmware

Tenda AX3 firmware v16.03.12.11 contains a stack-based buffer overflow in the formGetIptv function due to improper handling of the stbpvid stack buffer, which may result in memory corruption and remote code execution.

CVE-2025-69766 Crítica · 9.8 CWE-121 21/01/2026

Stack-based Buffer Overflow em Tenda Ax3 Firmware

Tenda AX3 firmware v16.03.12.11 contains a stack-based buffer overflow in the formGetIptv function due to improper handling of the citytag stack buffer, which may result in memory corruption and remote code execution.

CVE-2025-69763 Crítica · 9.8 CWE-121 21/01/2026

Stack-based Buffer Overflow em Tenda Ax3 Firmware

Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formSetIptv via the vlanId parameter, which can cause memory corruption and enable remote code execution.

CVE-2025-69762 Crítica · 9.8 CWE-121 21/01/2026

Stack-based Buffer Overflow em Tenda Ax3 Firmware

Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formSetIptv via the list parameter, which can cause memory corruption and enable remote code execution.

CVE-2025-71027 Alta · 7.5 CWE-787 13/01/2026

Out-of-bounds Write em Tenda Ax3 Firmware

Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the wanMTU2 parameter of the fromAdvSetMacMtuWan function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

CVE-2025-71026 Alta · 7.5 CWE-787 13/01/2026

Out-of-bounds Write em Tenda Ax3 Firmware

Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the wanSpeed2 parameter of the fromAdvSetMacMtuWan function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

CVE-2025-71025 Alta · 7.5 CWE-787 13/01/2026

Out-of-bounds Write em Tenda Ax3 Firmware

Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the cloneType2 parameter of the fromAdvSetMacMtuWan function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

CVE-2025-71024 Alta · 7.5 CWE-787 13/01/2026

Out-of-bounds Write em Tenda Ax3 Firmware

Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the serviceName2 parameter of the fromAdvSetMacMtuWan function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

CVE-2025-71023 Alta · 7.5 CWE-121 13/01/2026

Stack-based Buffer Overflow em Tenda Ax3 Firmware

Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the mac2 parameter of the fromAdvSetMacMtuWan function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

CVE-2025-65804 Média · 6.5 CWE-121 08/12/2025

Tenda AX3 v16.03.12.11 contains a stack overflow in formSetIptv via the iptvType parameter, which...

Tenda AX3 v16.03.12.11 contains a stack overflow in formSetIptv via the iptvType parameter, which can cause memory corruption and enable remote code execution (RCE).

CVE-2025-63149 Alta · 7.5 CWE-121 10/11/2025

Stack-based Buffer Overflow em Tenda Ax3 Firmware

Tenda AX3 V16.03.12.10_CN was discovered to contain a stack overflow in the urls parameter of the get_parentControl_list_Info function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

CVE-2025-63455 Alta · 7.5 CWE-121 10/11/2025

Stack-based Buffer Overflow em Tenda Ax3 Firmware

Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow via the shareSpeed parameter in the fromSetWifiGusetBasic function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

CVE-2025-63147 Alta · 7.5 CWE-787 10/11/2025

Out-of-bounds Write em Tenda Ax3 Firmware

Tenda AX3 V16.03.12.10_CN was discovered to contain a stack overflow in the deviceId parameter of the saveParentControlInfo function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

CVE-2025-63152 Alta · 7.5 CWE-121 10/11/2025

Stack-based Buffer Overflow em Tenda Ax3 Firmware

Tenda AX3 V16.03.12.10_CN was discovered to contain a stack overflow in the wpapsk_crypto parameter of the wlSetExternParameter function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

CVE-2025-63454 Alta · 7.5 CWE-121 31/10/2025

Stack-based Buffer Overflow em Tenda Ax3 Firmware

Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow via the deviceId parameter in the get_parentControl_list_Info function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.