Details of VAR-202507-0201

ID

VAR-202507-0201

CVE

CVE-2025-50641

TITLE

Shenzhen Tenda Technology Co.,Ltd. of AC6 Classic buffer overflow vulnerability in firmware

Trust: 0.8

sources: JVNDB: JVNDB-2025-008153

DESCRIPTION

Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the addWifiMacFilter function via the parameter deviceId. Shenzhen Tenda Technology Co.,Ltd. of AC6 Firmware has a classic buffer overflow vulnerability.Information may be obtained and information may be tampered with. The vulnerability is caused by the deviceId parameter in the addWifiMacFilter function failing to correctly verify the length of the input data. No detailed vulnerability details are currently provided

Trust: 2.16

sources: NVD: CVE-2025-50641 // JVNDB: JVNDB-2025-008153 // CNVD: CNVD-2025-15791

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2025-15791

AFFECTED PRODUCTS

vendor:	tenda	model:	ac6	scope:	eq	version:	15.03.05.16_multi	Trust: 1.0
vendor:	tenda	model:	ac6	scope:	eq	version:	ac6 firmware 15.03.05.16 multi	Trust: 0.8
vendor:	tenda	model:	ac6	scope:	eq	version:	-	Trust: 0.8
vendor:	tenda	model:	ac6	scope:	-	version:	-	Trust: 0.8
vendor:	tenda	model:	ac6 15.03.05.16 multi	scope:	-	version:	-	Trust: 0.6

sources: CNVD: CNVD-2025-15791 // JVNDB: JVNDB-2025-008153 // NVD: CVE-2025-50641

CVSS

SEVERITY

CVSSV2

CVSSV3

134c704f-9b21-4f2e-91b3-4a467353bcc0:	CVE-2025-50641
value:	MEDIUM
Trust: 1.0
OTHER:	JVNDB-2025-008153
value:	MEDIUM
Trust: 0.8
CNVD:	CNVD-2025-15791
value:	MEDIUM
Trust: 0.6

CNVD:	CNVD-2025-15791
severity:	MEDIUM
baseScore:	6.1
vectorString:	AV:N/AC:H/AU:N/C:C/I:P/A:N
accessVector:	NETWORK
accessComplexity:	HIGH
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	4.9
impactScore:	7.8
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

134c704f-9b21-4f2e-91b3-4a467353bcc0:	CVE-2025-50641
baseSeverity:	MEDIUM
baseScore:	6.5
vectorString:	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N
attackVector:	NETWORK
attackComplexity:	HIGH
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	LOW
availabilityImpact:	NONE
exploitabilityScore:	2.2
impactScore:	4.2
version:	3.1
Trust: 1.0
OTHER:	JVNDB-2025-008153
baseSeverity:	MEDIUM
baseScore:	6.5
vectorString:	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N
attackVector:	NETWORK
attackComplexity:	HIGH
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	LOW
availabilityImpact:	NONE
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: CNVD: CNVD-2025-15791 // JVNDB: JVNDB-2025-008153 // NVD: CVE-2025-50641

PROBLEMTYPE DATA

problemtype:	CWE-120	Trust: 1.0
problemtype:	Classic buffer overflow (CWE-120) [ others ]	Trust: 0.8

sources: JVNDB: JVNDB-2025-008153 // NVD: CVE-2025-50641

EXTERNAL IDS

db:	NVD	id:	CVE-2025-50641	Trust: 3.2
db:	JVNDB	id:	JVNDB-2025-008153	Trust: 0.8
db:	CNVD	id:	CNVD-2025-15791	Trust: 0.6

sources: CNVD: CNVD-2025-15791 // JVNDB: JVNDB-2025-008153 // NVD: CVE-2025-50641

REFERENCES

url:	https://github.com/faqiadegege/iotvuln/blob/main/tendaac6_addwifimacfilter_deviceid_overflow/detail.md	Trust: 2.4
url:	https://nvd.nist.gov/vuln/detail/cve-2025-50641	Trust: 0.8

sources: CNVD: CNVD-2025-15791 // JVNDB: JVNDB-2025-008153 // NVD: CVE-2025-50641

SOURCES

db:	CNVD	id:	CNVD-2025-15791
db:	JVNDB	id:	JVNDB-2025-008153
db:	NVD	id:	CVE-2025-50641

LAST UPDATE DATE

2025-07-17T23:36:17.201000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2025-15791	date:	2025-07-15T00:00:00
db:	JVNDB	id:	JVNDB-2025-008153	date:	2025-07-08T05:34:00
db:	NVD	id:	CVE-2025-50641	date:	2025-07-07T14:40:12.813

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2025-15791	date:	2025-07-15T00:00:00
db:	JVNDB	id:	JVNDB-2025-008153	date:	2025-07-08T00:00:00
db:	NVD	id:	CVE-2025-50641	date:	2025-07-01T16:15:23.453