Denial of Service Vulnerability in Tenda AC6
CVE-2025-57528

7.7HIGH

Key Information:

Vendor

Tenda
Status
Tenda AC6
Vendor
CVE Published:
19 September 2025

What is CVE-2025-57528?

A vulnerability has been identified in the Tenda AC6 router that allows attackers to exploit the formSetCfm function. By manipulating the parameters funcname, funcpara1, and funcpara2, an attacker can trigger a denial of service condition, potentially disrupting the router's operation and affecting connected devices. Addressing this issue is crucial for ensuring the overall security and continuity of service for users.

References

https://github.com/faqiadegege/IoTVuln/blob/main/tendaAc6...

CVSS V3.1

Score:
7.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-57528 : Denial of Service Vulnerability in Tenda AC6