CVE-2022-25447

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the schedendtime parameter in the openSchedWifi function...

CVE-2022-25450

Tenda AC6 V15.03.05.09multi was discovered to contain a stack overflow via the list parameter in the SetVirtualServerCfg function...

CVE-2022-25458

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the cmdinput parameter in the exeCommand function...

CVE-2022-36552

Tenda AC6AC1200 v5.0 Firmware v02.03.01.114 and below contains an issue in the component /cgi-bin/DownloadFlash which allows attackers to steal all data such as source code and system files via a crafted GET request...

CVE-2022-25455

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the list parameter in the SetIpMacBind function...

The vulnerability of the form_fast_setting_wifi_set() function (/goform/fast_setting_wifi_set) in the Tenda AC6 router’s microprogramming software allows a hacker to trigger a service failure.

The vulnerability of the formfastsettingwifiset function /goform/fastsettingwifiset in the Tenda AC6 router’s microprogramming software is related to buffer overflow in the stack when processing the timeZone parameter. Exploiting this vulnerability could allow a remote attacker to cause a service...

PT-2025-27553 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 15.03.05.16 multi Description: The issue is related to a Buffer Overflow in the addWifiMacFilter function, which can be exploited via the deviceId parameter. Recommendations: For Tenda AC6 version 15.03.05.16 multi, as a...

The vulnerability of the formWifiWpsOOB function in the microprogrammed routing software of Tenda AC6 allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formWifiWpsOOB function in the microprogrammed routing software Tenda AC6 is related to data writing beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure...

CVE-2024-10697

A vulnerability has been found in Tenda AC6 15.03.05.19 and classified as critical. Affected by this vulnerability is the function formWriteFacMac of the file /goform/WriteFacMac of the component API Endpoint. The manipulation of the argument mac leads to command injection. The attack can be...

Tenda AC6 Buffer Overflow Vulnerability (CNVD-2025-07605)

The Tenda AC6 is a wireless router from the Chinese company Tenda. The Tenda AC6 suffers from a buffer overflow vulnerability that originates from the timeZone parameter in the /goform/fastsettingwifiset file that fails to properly validate the length of the input data, which can be exploited by ...

The vulnerability of the formSetSpeedWan() function in the Tenda AC6 router’s microprogramming software allows a hacker to induce a service failure.

The vulnerability of the formSetSpeedWan function in the Tenda AC6 router’s microprogramming software is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2025-29121

A vulnerability was found in Tenda AC6 V15.03.05.16. The vulnerability affects the functionality of the /goform/fastsettingwifiset file formfastsettingwifiset. Using the timeZone parameter causes a stack-based buffer overflow...

CVE-2025-29121

A vulnerability was found in Tenda AC6 V15.03.05.16. The vulnerability affects the functionality of the /goform/fastsettingwifiset file formfastsettingwifiset. Using the timeZone parameter causes a stack-based buffer overflow...

CVE-2025-29121

A vulnerability was found in Tenda AC6 V15.03.05.16. The vulnerability affects the functionality of the /goform/fastsettingwifiset file formfastsettingwifiset. Using the timeZone parameter causes a stack-based buffer overflow...

CVE-2025-29121

A vulnerability was found in Tenda AC6 V15.03.05.16. The vulnerability affects the functionality of the /goform/fastsettingwifiset file formfastsettingwifiset. Using the timeZone parameter causes a stack-based buffer overflow...

CVE-2025-29121

A vulnerability was found in Tenda AC6 V15.03.05.16. The vulnerability affects the functionality of the /goform/fastsettingwifiset file formfastsettingwifiset. Using the timeZone parameter causes a stack-based buffer overflow...

Tenda AC6 安全漏洞

The Tenda AC6 is a wireless router from the Chinese company Tenda. The Tenda AC6 suffers from a buffer overflow vulnerability that originates from the timeZone parameter in the /goform/fastsettingwifiset file that fails to properly validate the length of the input data, which can be exploited by ...

CVE-2025-29121

CVE-2025-29121 affects Tenda AC6 (V15.03.05.16). The vulnerability arises in the /goform/fast_setting_wifi_set form (form_fast_setting_wifi_set) when the timeZone parameter is processed, causing a stack-based buffer overflow. This is documented across multiple sources (NVD, Red Hat, CNVD/CNNVD va...

Tenda AC6 formWifiWpsOOB function buffer overflow vulnerability

The Tenda AC6 is a wireless router from the Chinese company Tenda. Tenda AC6 v15.03.05.16 suffers from a buffer overflow vulnerability, which stems from the formWifiWpsOOB function failing to correctly validate the length of the input data, which can be exploited by an attacker to execute arbitra...

Tenda AC6 formSetSpeedWan function buffer overflow vulnerability

The Tenda AC6 is a wireless router from the Chinese company Tenda. Tenda AC6 v15.03.05.16 suffers from a buffer overflow vulnerability, which stems from the formSetSpeedWan function failing to correctly validate the length of the input data, which can be exploited by an attacker to execute...