high7.5
CVE-2025-63149
Tenda AX3 V16.03.12.10_CN was discovered to contain a stack overflow in the urls parameter of the get_parentControl_list_Info function.
Impact
Tenda AX3 V16.03.12.10_CN was discovered to contain a stack overflow in the urls parameter of the get_parentControl_list_Info function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tenda | Ax3 Firmware | Version 16.03.12.10 |