BaseFortify

Publication date: 2025-12-08

Last updated on: 2025-12-11

Assigner: MITRE

Description

Tenda AX3 v16.03.12.11 contains a stack overflow in formSetIptv via the iptvType parameter, which can cause memory corruption and enable remote code execution (RCE).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-08

Last Modified

2025-12-11

Generated

2026-07-06

AI Q&A

2025-12-08

EPSS Evaluated

2026-07-05

NVD

CVE-2025-65804

EUVD

EUVD-2025-201799

Affected Vendors & Products

Vendor	Product	Version / Range
tenda	ax3	v16.03.12.11
tenda	ax3_firmware	16.03.12.11

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

Executive Summary

This vulnerability is a stack overflow in the Tenda AX3 router firmware (version v16.03.12.11) in the formSetIptv function via the iptvType parameter. Exploiting this can cause memory corruption and potentially allow an attacker to execute code remotely on the device.

Impact Analysis

The vulnerability can lead to remote code execution on the affected device, which means an attacker could take control of the router, disrupt its operation, or use it as a foothold to attack other devices on the network.

Hi! I’m here to help you understand CVE-2025-65804. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70