PT-2026-2580 · Tenda · Tenda Ax3
CVE-2025-71023
·
Publicado
2025-12-29
·
Atualizado
2026-01-20
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Tenda AX-3 version 16.03.12.10 CN
Description
The Tenda AX-3 device contains a stack overflow in the
mac2 parameter of the fromAdvSetMacMtuWan function. This issue allows attackers to cause a Denial of Service (DoS) by sending a crafted request.Recommendations
Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the
fromAdvSetMacMtuWan function until a patch is available.Exploit
Correção
DoS
Stack Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Tenda Ax3