CVE-2025-46035

Buffer Overflow vulnerability in Tenda AC6 v.15.03.05.16 allows a remote attacker to cause a denial of service via the oversized schedStartTime and schedEndTime parameters in an unauthenticated HTTP GET request to the /goform/openSchedWifi endpoint...

CVE-2025-46035

creationtimestamp| type| source ---|---|--- 2025-06-12 15:33:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18175 2025-06-12 17:11:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrgg5g2jhk2s 2025-06-13 05:38:09+00:00| seen|...

CVE-2025-46035

A buffer overflow vulnerability exists in Tenda AC6 version v.15.03.05.16 . The flaw is caused by a classic buffer overflow where the application performs a buffer copy without properly validating the input size of the schedStartTime and schedEndTime parameters. A remote attacker can exploit this...