ID
VAR-202510-2278
CVE
CVE-2025-60343
TITLE
Tenda AC6 AdvSetMacMtuWan function buffer overflow vulnerability
Trust: 0.6
DESCRIPTION
Multiple buffer overflows in the AdvSetMacMtuWan function of Tenda AC6 v.15.03.06.50 allows attackers to cause a Denial of Service (DoS) via injecting a crafted payload into the wanMTU, wanSpeed, cloneType, mac, serviceName, serverName, wanMTU2, wanSpeed2, cloneType2, mac2, serviceName2, and serverName2 parameters. The Tenda AC6 is a wireless router manufactured by Tenda, a Chinese company. Version 15.03.06.50 of the Tenda AC6 contains a buffer overflow vulnerability. This vulnerability stems from the AdvSetMacMtuWan function failing to properly validate the length of input data. Attackers could exploit this vulnerability to execute arbitrary code or cause a denial-of-service attack
Trust: 1.44
IOT TAXONOMY
| category: | ['Network device'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | tenda | model: | ac6 | scope: | eq | version: | 15.03.06.50 | Trust: 1.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-120 | Trust: 1.0 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2025-60343 | Trust: 1.6 |
| db: | CNVD | id: | CNVD-2025-26961 | Trust: 0.6 |
REFERENCES
| url: | https://github.com/z472421519/binaryaudit/blob/main/poc/bof/tenda/advsetmacmtuwan/advsetmacmtuwan.md | Trust: 1.0 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2025-60343 | Trust: 0.6 |
SOURCES
| db: | CNVD | id: | CNVD-2025-26961 |
| db: | NVD | id: | CVE-2025-60343 |
LAST UPDATE DATE
2025-11-19T23:17:53.572000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2025-26961 | date: | 2025-11-05T00:00:00 |
| db: | NVD | id: | CVE-2025-60343 | date: | 2025-10-24T13:21:06.800 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2025-26961 | date: | 2025-11-05T00:00:00 |
| db: | NVD | id: | CVE-2025-60343 | date: | 2025-10-22T18:15:35.410 |