Tenda

Ac6 Firmware

104 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.1

CVE-2025-50263

Exploit
  • EPSS 0.11%
  • Veröffentlicht 03.07.2025 00:00:00
  • Zuletzt bearbeitet 07.07.2025 14:40:36

Tenda AC6 v15.03.05.16_multi is vulnerable to Buffer Overflow in the fromSetRouteStatic function via the list parameter.

6.5

CVE-2025-50641

Exploit
  • EPSS 0.08%
  • Veröffentlicht 01.07.2025 00:00:00
  • Zuletzt bearbeitet 08.04.2026 19:24:14

Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the addWifiMacFilter function via the parameter deviceId.

7.3

CVE-2025-50528

Exploit
  • EPSS 0.14%
  • Veröffentlicht 27.06.2025 00:00:00
  • Zuletzt bearbeitet 01.07.2025 18:14:43

A buffer overflow vulnerability exists in the fromNatStaticSetting function of Tenda AC6 <=V15.03.05.19 via the page parameter.

7.5

CVE-2025-46035

Exploit
  • EPSS 0.32%
  • Veröffentlicht 12.06.2025 00:00:00
  • Zuletzt bearbeitet 17.06.2025 20:32:44

Buffer Overflow vulnerability in Tenda AC6 v.15.03.05.16 allows a remote attacker to cause a denial of service via the oversized schedStartTime and schedEndTime parameters in an unauthenticated HTTP GET request to the /goform/openSchedWifi endpoint

9.8

CVE-2025-5855

Exploit
  • EPSS 0.93%
  • Veröffentlicht 09.06.2025 01:31:07
  • Zuletzt bearbeitet 09.06.2025 19:03:39

A vulnerability, which was classified as critical, was found in Tenda AC6 15.03.05.16. This affects the function formSetRebootTimer of the file /goform/SetRebootTimer. The manipulation of the argument rebootTime leads to stack-based buffer overflow. ...

8.8

CVE-2025-5854

Exploit
  • EPSS 0.62%
  • Veröffentlicht 09.06.2025 01:15:21
  • Zuletzt bearbeitet 09.06.2025 19:03:46

A vulnerability, which was classified as critical, has been found in Tenda AC6 15.03.05.16. Affected by this issue is the function fromadvsetlanip of the file /goform/AdvSetLanip. The manipulation of the argument lanMask leads to buffer overflow. The...

8.8

CVE-2025-5853

Exploit
  • EPSS 0.99%
  • Veröffentlicht 09.06.2025 00:31:06
  • Zuletzt bearbeitet 09.06.2025 19:04:03

A vulnerability classified as critical was found in Tenda AC6 15.03.05.16. Affected by this vulnerability is the function formSetSafeWanWebMan of the file /goform/SetRemoteWebCfg. The manipulation of the argument remoteIp leads to stack-based buffer ...

8.8

CVE-2025-5852

Exploit
  • EPSS 0.62%
  • Veröffentlicht 09.06.2025 00:00:18
  • Zuletzt bearbeitet 09.06.2025 19:04:20

A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16. Affected is the function formSetPPTPUserList of the file /goform/setPptpUserList. The manipulation of the argument list leads to buffer overflow. It is possible to launch...

6.5

CVE-2025-44172

Exploit
  • EPSS 0.32%
  • Veröffentlicht 02.06.2025 00:00:00
  • Zuletzt bearbeitet 03.06.2025 15:55:33

Tenda AC6 V15.03.05.16 was discovered to contain a stack overflow via the time parameter in the setSmartPowerManagement function.

7.5

CVE-2025-29121

Exploit
  • EPSS 0.21%
  • Veröffentlicht 20.03.2025 00:00:00
  • Zuletzt bearbeitet 28.03.2025 19:34:42

A vulnerability was found in Tenda AC6 V15.03.05.16. The vulnerability affects the functionality of the /goform/fast_setting_wifi_set file form_fast_setting_wifi_set. Using the timeZone parameter causes a stack-based buffer overflow.