Buffer Overflow Vulnerability in Tenda AC6 Router Software
CVE-2025-25505

6.5MEDIUM

Key Information:

Vendor
Tenda
Status
AC6 Router
Vendor
CVE Published:
21 February 2025

Summary

The Tenda AC6 router version 15.03.05.16_multi is susceptible to a vulnerability that allows for a buffer overflow in the sub_452A4 function. This flaw could potentially enable an unauthorized user to cause unintended behavior, including system crashes or remote code execution, thereby jeopardizing the security and integrity of the network. It is crucial for Tenda users to remain vigilant and implement security measures to mitigate the risk associated with this vulnerability.

References

https://github.com/faqiadegege/IoTVuln/blob/main/tendaAC6...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.