A critical stack overflow vulnerability in Tenda AX1803 routers exposes the device to remote Denial of Service attacks by unauthenticated actors.

The device contains a stack overflow vulnerability within the security_5g parameter of the sub_727F4 function. This flaw allows an unauthenticated, remote attacker to crash the device service by sending a maliciously crafted network request.

The vulnerability carries a CVSS score of 7.5, indicating a high severity risk due to the ease of exploitation. A successful Denial of Service attack would render the router unresponsive, causing significant network downtime for all connected users and business operations. This disruption could lead to operational paralysis and requires immediate administrative attention to minimize potential impact.

Immediate Action: Since no official patch is currently identified, isolate the management interface of the affected Tenda AX1803 routers from the public internet immediately.

Proactive Monitoring: Review system logs for signs of service crashes, unexpected reboots, or unusual traffic patterns targeting the device management ports.

Compensating Controls: Implement strict firewall rules to restrict access to the device management interface to trusted, internal IP addresses only.

Public Exploit Available: Yes, a published proof-of-concept exists, as documented in the technical write-up referenced by the CVE record.

Given the availability of a functional proof-of-concept and the lack of a vendor-provided patch, this vulnerability poses a credible risk to network stability. Administrators should prioritize restricting network access to these devices immediately. Monitor vendor communication channels closely for the release of a firmware update and apply it as soon as it becomes available.