CVE Details
Basic Information
| Title | Tenda AX1803 setMacFilterCfg formSetMacFilterCfg stack-based overflow |
|---|---|
| Type | cve |
| Published | 2025-07-14T10:44:06.851Z |
| Modified | 2025-07-14T10:44:06.851Z |
Product Information
| Vendor | Tenda |
|---|---|
| Product | AX1803 |
| Version | 1.0.0.1 |
CVSS Information
| Base Score | 8.7 (HIGH) |
|---|---|
| Attack Vector | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P |
AI Analysis
| AI Description | A critical stack-based buffer overflow vulnerability exists in the Tenda AX1803 router’s MAC filter configuration, allowing remote attackers to exploit the deviceList argument. This vulnerability can be exploited remotely and has publicly available exploit code, making it highly dangerous. |
|---|---|
| AI Severity | High |
| AI Vendor | Tenda |
| AI Product | AX1803 |
| AI Version | 1.0.0.1 |
Affected Products
- Tenda AX1803 1.0.0.1
Additional Information
| CWE List | CWE-121, CWE-119 |
|---|---|
| Source | VulDB |
Description
A vulnerability classified as critical has been found in Tenda AX1803 1.0.0.1. Affected is the function formSetMacFilterCfg of the file /goform/setMacFilterCfg. The manipulation of the argument deviceList leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.