954 matches found
CVE-2025-27129
An authentication bypass vulnerability exists in the HTTP authentication functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can send packets to trigger this vulnerability...
CVE-2025-27129
An authentication bypass vulnerability exists in the HTTP authentication functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can send packets to trigger this vulnerability...
CVE-2025-30256
A denial of service vulnerability exists in the HTTP Header Parsing functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted series of HTTP requests can lead to a reboot. An attacker can send multiple network packets to trigger this vulnerability...
CVE-2025-32010
A stack-based buffer overflow vulnerability exists in the Cloud API functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted HTTP response can lead to arbitrary code execution. An attacker can send an HTTP response to trigger this vulnerability...
CVE-2025-32010
CVE-2025-32010 affects Tenda AC6 V5.0 V02.03.01.110 in the Cloud API: a stack-based buffer overflow triggered by a specially crafted HTTP response can lead to arbitrary code execution. The TALOS analysis confirms the vulnerability exists in the Cloud API’s handling of HTTP interactions, enabling ...
CVE-2025-32010
A stack-based buffer overflow vulnerability exists in the Cloud API functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted HTTP response can lead to arbitrary code execution. An attacker can send an HTTP response to trigger this vulnerability...
CVE-2025-55498
CVE-2025-55498 affects Tenda AC6 (model 15.03.06.23_multi). The vulnerability is a buffer overflow in the fromSetSysTime() function caused by improper validation of the length of the time parameter, which can lead to denial of service. Public details across CNVD/CNVD/CNNVD/Red Hat/NVD references ...
CVE-2025-55482
Tenda AC6 V15.03.06.23multi is vulnerable to Buffer Overflow in the formSetCfm function...
CVE-2025-55503
Tenda AC6 V15.03.06.23multi has a stack overflow vulnerability via the deviceName parameter in the saveParentControlInfo function...
PT-2025-34056 · Tenda · Tenda Ac6
Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 15.03.06.23 multi Description: The Tenda AC6 router firmware contains a stack overflow vulnerability. This issue is triggered via the deviceName parameter within the saveParentControlInfo function. Recommendations: Update to...
PT-2025-34067 · Tenda · Tenda Ac6
Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 15.03.06.23 multi Description: The Tenda AC6 version 15.03.06.23 multi contains a buffer overflow via the time parameter in the fromSetSysTime function. Recommendations: At the moment, there is no information about a newer...
Tenda AC6 安全漏洞
Tenda AC6 is a dual-band wireless router from Tenda that supports IPv4 and IPv6 protocols and utilizes the 802.11ac/n wireless standard to provide a wireless transmission rate of 1167Mbps. Tenda AC6 has a stack buffer overflow vulnerability, the vulnerability stems from the Cloud API function has...
PT-2025-34066 · Tenda · Tenda Ac6
Name of the Vulnerable Software and Affected Versions: Tenda AC6 version V15.03.06.23 multi Description: The Tenda AC6 version V15.03.06.23 multi is susceptible to a buffer overflow issue within the formSetCfm function. Recommendations: At the moment, there is no information about a newer version...
Tenda AC6 V5.0 Tenda App Router Authentication cleartext transmission vulnerability
Talos Vulnerability Report TALOS-2025-2178 Tenda AC6 V5.0 Tenda App Router Authentication cleartext transmission vulnerability August 20, 2025 CVE Number CVE-2025-31143 SUMMARY A cleartext transmission vulnerability exists in the Tenda App Router Authentication functionality of Tenda AC6 V5.0...
Tenda AC6 V5.0 HTTP Header Parsing denial of service vulnerability
Talos Vulnerability Report TALOS-2025-2166 Tenda AC6 V5.0 HTTP Header Parsing denial of service vulnerability August 20, 2025 CVE Number CVE-2025-30256 SUMMARY A denial of service vulnerability exists in the HTTP Header Parsing functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted...
Tenda AC6 V5.0 Session Authentication Cookie unencrypted transmission of credentials vulnerability
Talos Vulnerability Report TALOS-2025-2167 Tenda AC6 V5.0 Session Authentication Cookie unencrypted transmission of credentials vulnerability August 20, 2025 CVE Number CVE-2025-31646 SUMMARY A unencrypted transmission of credentials vulnerability exists in the Session Authentication Cookie...
PT-2025-34044 · Tenda · Tenda Ac6
Name of the Vulnerable Software and Affected Versions: Tenda AC6 version V02.03.01.110 Description: An unsafe default authentication issue exists in the Initial Setup Authentication functionality. A specially crafted network request can lead to arbitrary code execution. An attacker can access the...
PT-2025-34046 · Tenda · Tenda Ac6
Name of the Vulnerable Software and Affected Versions: Tenda AC6 version V5.0 V02.03.01.110 Description: An authentication bypass exists in the HTTP authentication functionality. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can send packets to trigger this...