ID
VAR-202510-2335
CVE
CVE-2025-60339
TITLE
Tenda AC6 openSchedWifi function buffer overflow vulnerability
Trust: 0.6
DESCRIPTION
Multiple buffer overflow vulnerabilities in the openSchedWifi function of Tenda AC6 v.15.03.06.50 allows attackers to cause a Denial of Service (DoS) via injecting a crafted payload into the schedStartTime and schedEndTime parameters. The Tenda AC6 is a wireless router manufactured by Tenda, a Chinese company. Version 15.03.06.50 of the Tenda AC6 contains a buffer overflow vulnerability. This vulnerability stems from the openSchedWifi function failing to properly validate the length of the input data. Attackers could exploit this vulnerability to execute arbitrary code or cause a denial-of-service attack
Trust: 1.44
IOT TAXONOMY
| category: | ['Network device'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | tenda | model: | ac6 | scope: | eq | version: | 15.03.06.50 | Trust: 1.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-787 | Trust: 1.0 |
| problemtype: | CWE-120 | Trust: 1.0 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2025-60339 | Trust: 1.6 |
| db: | CNVD | id: | CNVD-2025-26963 | Trust: 0.6 |
REFERENCES
| url: | https://github.com/z472421519/binaryaudit/blob/main/poc/bof/tenda/setschedwifi/setschedwifi.md | Trust: 1.0 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2025-60339 | Trust: 0.6 |
SOURCES
| db: | CNVD | id: | CNVD-2025-26963 |
| db: | NVD | id: | CVE-2025-60339 |
LAST UPDATE DATE
2025-11-19T23:10:02.875000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2025-26963 | date: | 2025-11-05T00:00:00 |
| db: | NVD | id: | CVE-2025-60339 | date: | 2025-10-27T16:15:41.590 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2025-26963 | date: | 2025-11-05T00:00:00 |
| db: | NVD | id: | CVE-2025-60339 | date: | 2025-10-22T18:15:34.863 |