ID
VAR-202510-2276
CVE
CVE-2025-63458
TITLE
Tenda AX-1803 buffer overflow vulnerability
Trust: 0.6
DESCRIPTION
Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the timeZone parameter in the form_fast_setting_wifi_set function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request. The Tenda AX-1803 is a wireless router manufactured by Tenda, a Chinese company. Version 1.0.0.1 of the Tenda AX-1803 contains a buffer overflow vulnerability. This vulnerability stems from the fact that the `timeZone` parameter in the `form_fast_setting_wifi_set` function fails to properly validate the length of the input data
Trust: 1.44
IOT TAXONOMY
| category: | ['Network device'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | tenda | model: | ax1803 | scope: | eq | version: | 1.0.0.1 | Trust: 1.0 |
| vendor: | tenda | model: | ax-1803 | scope: | eq | version: | v1.0.0.1 | Trust: 0.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-121 | Trust: 1.0 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2025-63458 | Trust: 1.6 |
| db: | CNVD | id: | CNVD-2025-27233 | Trust: 0.6 |
REFERENCES
| url: | https://github.com/0-fool/vulnbycola/blob/main/tenda/ax-1803/2/1.md | Trust: 1.0 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2025-63458 | Trust: 0.6 |
SOURCES
| db: | CNVD | id: | CNVD-2025-27233 |
| db: | NVD | id: | CVE-2025-63458 |
LAST UPDATE DATE
2025-11-18T15:38:35.438000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2025-27233 | date: | 2025-11-07T00:00:00 |
| db: | NVD | id: | CVE-2025-63458 | date: | 2025-11-05T17:28:58.980 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2025-27233 | date: | 2025-11-07T00:00:00 |
| db: | NVD | id: | CVE-2025-63458 | date: | 2025-10-31T19:15:51.163 |