The vulnerability of the SetClientState() function in Tenda AC6 software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the SetClientState function in Tenda AC6 microprogramming router software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by sending a specially...

The vulnerability of the SetSpeedWan() function in the Tenda AC6 router’s microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the SetSpeedWan function in the Tenda AC6 router’s microprogramming software is related to the writing of data beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure by sending a specially...

The vulnerability of the fast_setting_wifi_set() function in Tenda AC6 router software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the fastsettingwifiset function in the Tenda AC6 router’s microprogramming software is related to the writing of data beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure by sending a...

The vulnerability of the fromNatStaticSetting function in the Tenda AC6 router’s microprogramming software allows a attacker to trigger a segmentation fault.

The vulnerability of the fromNatStaticSetting function in the Tenda AC6 router microprogramming system is caused by buffer overflow. Exploiting this vulnerability can allow a malicious actor, operating remotely, to trigger a segmentation fault using a specially created HTTP request...

The vulnerability of the fromSetSysTime() function in Tenda AC6 router software allows a hacker to execute arbitrary code.

The vulnerability of the fromSetSysTime function in Tenda AC6 router software lies in the copying of buffers without checking the size of the input data when processing the ntpServer parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the fromSetIpMacBind() function in Tenda AC6 router software allows a hacker to trigger a service failure.

The vulnerability of the fromSetIpMacBind function in Tenda AC6 router microprogramming software is related to the copying of buffers without checking the input data during the processing of the list parameter. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-57296

Tenda AC6 router firmware 15.03.05.19 contains a command injection vulnerability in the formSetIptv function, which processes requests to the /goform/SetIPTVCfg web interface. When handling the list and vlanId parameters, the subADBC0 helper function concatenates these user-supplied values into...

CVE-2025-57296: Improper Neutralization of Special Elements used in a Command

Tenda AC6 router firmware 15.03.05.19 contains a command injection vulnerability in the formSetIptv function, which processes requests to the /goform/SetIPTVCfg web interface. When handling the list and vlanId parameters, the subADBC0 helper function concatenates these user-supplied values into...

The vulnerability of the formSetMacFilterCfg() function in the Tenda AC6 router’s microprogramming software allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the formSetMacFilterCfg function in the Tenda AC6 router’s microprogramming software lies in the fact that the operation outputs outside the buffer in memory when processing the parameters macFilterType and deviceList. Exploiting this vulnerability allows a remote attacker to...

The vulnerability of the formSetFirewallCfg() function in the Tenda AC6 router’s microprogramming software allows a hacker to trigger a service failure.

The vulnerability of the formSetFirewallCfg function in the Tenda AC6 router’s microprogramming software is related to the operation of writing data outside the buffer in memory when processing the firewallEn parameter. Exploiting this vulnerability can allow a remote attacker to cause a service...

CVE-2025-27129

An authentication bypass vulnerability exists in the HTTP authentication functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can send packets to trigger this vulnerability...

Tenda AC6 Buffer Overflow Vulnerability (CNVD-2025-15721)

Tenda AC6 is a dual-band wireless router from Tenda. Tenda AC6 suffers from a buffer overflow vulnerability that originates from the failure of the schedStartTime and schedEndTime parameters in the /goform/openSchedWifi endpoints to correctly validate the length size of the input data, and no...

The vulnerability of the formSetRebootTimer() function (/goform/SetRebootTimer) in the Tenda AC6 router’s microprogramming software allows a intruder to trigger a service failure.

The vulnerability of the formSetRebootTimer function /goform/SetRebootTimer in the Tenda AC6 router’s microprogrammed software is related to the issue of the operation exceeding the buffer boundaries in memory when processing the rebootTime parameter. Exploiting this vulnerability could allow a...

The vulnerability of the formSetPPTPUserList() function (/goform/setPptpUserList) in the Tenda AC6 router software allows a hacker to trigger a service failure.

The vulnerability of the formSetPPTPUserList function /goform/setPptpUserList of the Tenda AC6 router’s microprogramming software is related to the copying of buffers without checking the size of the input data when processing the list parameter. Exploiting this vulnerability could allow an...

Tenda AC6 安全漏洞

The Tenda AC6 is a wireless router from the Chinese company Tenda. The Tenda AC6 suffers from a buffer overflow vulnerability that originates from the parameter time in the setSmartPowerManagement function failing to properly validate the length of the input data, which can be exploited by an...

The vulnerability of the formWifiWpsOOB function in the microprogrammed routing software of Tenda AC6 allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formWifiWpsOOB function in the microprogrammed routing software Tenda AC6 is related to data writing beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure...

The vulnerability of the formSetSpeedWan() function in the Tenda AC6 router’s microprogramming software allows a hacker to induce a service failure.

The vulnerability of the formSetSpeedWan function in the Tenda AC6 router’s microprogramming software is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Tenda AC6 安全漏洞

The Tenda AC6 is a wireless router from the Chinese company Tenda. The Tenda AC6 suffers from a buffer overflow vulnerability that originates from the timeZone parameter in the /goform/fastsettingwifiset file that fails to properly validate the length of the input data, which can be exploited by ...

The vulnerability of the formexeCommand() function in the Tenda AC6 router’s microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the formexeCommand function in the Tenda AC6 router’s microprogramming software is related to incorrect code generation during the processing of the cmdinput parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the sub_452A4() function in the Tenda AC6 router’s microprogramming system, which allows a hacker to cause a service failure.

The vulnerability of the sub452A4 function in the Tenda AC6 router’s microprogramming system is related to the operation of writing data outside the buffer in memory when processing the callback parameter. Exploiting this vulnerability can allow an attacker to cause a service failure...