Stack Overflow Vulnerability in Tenda AX-3 Router
CVE-2025-63455

7.5HIGH

Key Information:

Vendor

Tenda
Status
AX-3 Router
Vendor
CVE Published:
10 November 2025

What is CVE-2025-63455?

The Tenda AX-3 router has been identified to contain a critical stack overflow vulnerability stemming from the shareSpeed parameter in the fromSetWifiGusetBasic function. This flaw enables attackers to execute specially crafted requests, leading to a Denial of Service (DoS) condition, which can disrupt network services for legitimate users. Users of the affected version are strongly urged to apply updates and implement security measures to safeguard their networks.

References

https://github.com/0-fool/VulnbyCola/blob/main/Tenda/AX-3...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-63455 : Stack Overflow Vulnerability in Tenda AX-3 Router