Tenda AC6 安全漏洞

The Tenda AC6 is a wireless router from the Chinese company Tenda. The Tenda AC6 suffers from a buffer overflow vulnerability that originates from the formexeCommand function failing to properly validate the length of input data, which can be exploited by an attacker to execute arbitrary code on...

CVE-2025-25343: Buffer Copy without Checking Size of Input

Tenda AC6 V15.03.05.16 firmware has a buffer overflow vulnerability in the formexeCommand function...

CVE-2025-25343

Tenda AC6 router with firmware V15.03.05.16 contains a buffer overflow in the formexeCommand function. The root cause is improper validation of input length in that function, enabling potential arbitrary code execution or denial of service. Exploitation status is not detailed in the provided docu...

PT-2025-7079 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version V15.03.05.16 Description: The issue is a buffer overflow vulnerability in the formexeCommand function. This vulnerability can be exploited, potentially leading to unauthorized access or control. There is no information...

CVE-2025-25343

Tenda AC6 V15.03.05.16 firmware has a buffer overflow vulnerability in the formexeCommand function...

CVE-2025-25343

Tenda AC6 V15.03.05.16 firmware has a buffer overflow vulnerability in the formexeCommand function...

CVE-2025-0349

A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument src/mac leads to stack-based buffer overflow. It is possible to launch the attack remotely. The...

CVE-2024-10698

A vulnerability was found in Tenda AC6 15.03.05.19 and classified as critical. Affected by this issue is the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack may be launched remotely. The...

CVE-2024-46450

Incorrect access control in Tenda AC1200 Smart Dual-Band WiFi Router Model AC6 v2.0 Firmware v15.03.06.50 allows attackers to bypass authentication via a crafted web request...

CVE-2024-46450: Missing Authorization

Incorrect access control in Tenda AC1200 Smart Dual-Band WiFi Router Model AC6 v2.0 Firmware v15.03.06.50 allows attackers to bypass authentication via a crafted web request...

Tenda AC6 Buffer Overflow Vulnerability

The Tenda AC6 is a wireless router from the Chinese company Tenda. The Tenda AC6 suffers from a buffer overflow vulnerability that originates from a boundary error in the parameter src when handling untrusted input. An attacker could exploit this vulnerability to execute arbitrary code on the...

PT-2025-7557 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 15.03.05.16 multi Description: The issue is related to a remote code execution RCE problem. In the formexeCommand function, the parameter cmdinput can cause remote command execution. Recommendations: For Tenda AC6 version...

PT-2025-7556 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 15.03.05.16 multi Description: The issue is related to a Buffer Overflow in the sub 452A4 function. This can potentially allow for exploitation, although specific details about the estimated number of affected devices or...

CVE-2025-0349

A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument src/mac leads to stack-based buffer overflow. It is possible to launch the attack remotely. The...

CVE-2025-0349

A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument src/mac leads to stack-based buffer overflow. It is possible to launch the attack remotely. The...

CVE-2025-0349 Tenda AC6 GetParentControlInfo stack-based overflow

A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument src/mac leads to stack-based buffer overflow. It is possible to launch the attack remotely. The...

CVE-2025-0349 Tenda AC6 GetParentControlInfo stack-based overflow

A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument src/mac leads to stack-based buffer overflow. It is possible to launch the attack remotely. The...

CVE-2025-0349

CVE-2025-0349 affects Tenda AC6 (firmware 15.03.05.16). The vulnerability is a stack-based overflow in GetParentControlInfo (/goform/GetParentControlInfo) triggered by manipulating the src/mac argument, which can be exploited remotely. Public exploit/public disclosure is noted. Other parameters m...

CVE-2025-0349: Stack-based Buffer Overflow

A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument src/mac leads to stack-based buffer overflow. It is possible to launch the attack remotely. The...

Tenda AC6 安全漏洞

The Tenda AC6 is a wireless router from the Chinese company Tenda. The Tenda AC6 suffers from a buffer overflow vulnerability that originates from a boundary error in the parameter src when handling untrusted input. An attacker could exploit this vulnerability to execute arbitrary code on the...