A stack overflow vulnerability exists in Tenda AX-3 firmware version 16.03.12.10_CN via the deviceId parameter in the get_parentControl_list_Info function. This flaw can be exploited by an unauthenticated attacker remotely to cause a denial of service (DoS) condition by sending a specially crafted request. The vulnerability does not impact confidentiality or integrity but results in service disruption.