ID
VAR-202510-2250
CVE
CVE-2025-60340
TITLE
Tenda AC6 SetClientState function buffer overflow vulnerability
Trust: 0.6
DESCRIPTION
Multiple buffer overflows in the SetClientState function of Tenda AC6 v.15.03.06.50 allows attackers to cause a Denial of Service (DoS) via injecting a crafted payload into the limitSpeed, deviceId, and limitSpeedUp parameters. The Tenda AC6 is a wireless router manufactured by Tenda, a Chinese company. Version 15.03.06.50 of the Tenda AC6 contains a buffer overflow vulnerability. This vulnerability stems from the SetClientState function's failure to properly validate the length of input data. Attackers could exploit this vulnerability to execute arbitrary code or cause a denial-of-service attack
Trust: 1.44
IOT TAXONOMY
| category: | ['Network device'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | tenda | model: | ac6 | scope: | eq | version: | 15.03.06.50 | Trust: 1.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-120 | Trust: 1.0 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2025-60340 | Trust: 1.6 |
| db: | CNVD | id: | CNVD-2025-26962 | Trust: 0.6 |
REFERENCES
| url: | https://github.com/z472421519/binaryaudit/blob/main/poc/bof/tenda/setclientstate/setclientstate.md | Trust: 1.0 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2025-60340 | Trust: 0.6 |
SOURCES
| db: | CNVD | id: | CNVD-2025-26962 |
| db: | NVD | id: | CVE-2025-60340 |
LAST UPDATE DATE
2025-11-19T23:27:40.928000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2025-26962 | date: | 2025-11-05T00:00:00 |
| db: | NVD | id: | CVE-2025-60340 | date: | 2025-10-28T16:15:38.817 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2025-26962 | date: | 2025-11-05T00:00:00 |
| db: | NVD | id: | CVE-2025-60340 | date: | 2025-10-22T18:15:35 |