Tenda Ax1803 vulnerabilities
60 vulnerabilities
Known vulnerabilities in Tenda Ax1803, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-63456tendaax1803_firmware
EPSS score0.40%
Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the time parameter in the SetSysTimeCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.CVE-2025-63458tendaax1803_firmwareEPSS score0.40%
Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the timeZone parameter in the form_fast_setting_wifi_set function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.CVE-2025-63457tendaax1803_firmwareEPSS score0.40%
Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the wanMTU parameter in the sub_4F55C function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.CVE-2025-7598tendaax1803_firmwareEPSS score0.96%
A vulnerability classified as critical was found in Tenda AX1803 1.0.0.1. Affected by this vulnerability is the function formSetWifiMacFilterCfg of the file /goform/setWifiFilterCfg. The manipulation of the argument deviceList leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.CVE-2025-7597tendaax1803_firmwareEPSS score0.96%
A vulnerability classified as critical has been found in Tenda AX1803 1.0.0.1. Affected is the function formSetMacFilterCfg of the file /goform/setMacFilterCfg. The manipulation of the argument deviceList leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.CVE-2025-70648tendaax1803_firmwareEPSS score0.37%
Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow in the security_5g parameter of the sub_727F4 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.CVE-2025-70651tendaax1803_firmwareEPSS score0.37%
Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow in the ssid parameter of the form_fast_setting_wifi_set function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.CVE-2025-70646tendaax1803_firmwareEPSS score0.37%
Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub_72290 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.CVE-2022-40874tendaax1803_firmwareEPSS score0.88%
Tenda AX1803 v1.0.0.1 was discovered to contain a heap overflow vulnerability in the GetParentControlInfo function, which can cause a denial of service attack through a carefully constructed http request.CVE-2022-40876tendaax1803_firmwareEPSS score1.95%
In Tenda ax1803 v1.0.0.1, the http requests handled by the fromAdvSetMacMtuWan functions, wanSpeed, cloneType, mac, can cause a stack overflow and enable remote code execution (RCE).CVE-2022-40875tendaax1803_firmwareEPSS score0.88%
Tenda AX1803 v1.0.0.1 was discovered to contain a heap overflow in the function GetParentControlInfo.CVE-2022-42086tendaax1803_firmwareEPSS score0.38%
Tenda AX1803 US_AX1803v2.0br_v1.0.0.1_2994_CN_ZGYD01_4 is vulnerable to Cross Site Request Forgery (CSRF) via function TendaAteMode.CVE-2022-42087tendaax1803_firmwareEPSS score0.38%
Tenda AX1803 US_AX1803v2.0br_v1.0.0.1_2994_CN_ZGYD01_4 is vulnerable to Cross Site Request Forgery (CSRF) via function fromSysToolReboot.CVE-2022-37823tendaax1803_firmwareEPSS score0.34%
Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the list parameter in the function formSetVirtualSer.CVE-2022-37821tendaax1803_firmwareEPSS score0.34%
Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the ProvinceCode parameter in the function formSetProvince.CVE-2022-37824tendaax1803_firmwareEPSS score0.34%
Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the shareSpeed parameter in the function fromSetWifiGusetBasic.CVE-2022-37819tendaax1803_firmwareEPSS score0.34%
Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the timezone parameter in the function fromSetSysTime.CVE-2022-37817tendaax1803_firmwareEPSS score0.34%
Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the function fromSetIpMacBind.CVE-2022-37822tendaax1803_firmwareEPSS score0.34%
Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the function fromSetRouteStatic.CVE-2022-37818tendaax1803_firmwareEPSS score0.34%
Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the list parameter at the function formSetQosBand.