CVE-2025-25343

Tenda AC6 V15.03.05.16 firmware has a buffer overflow vulnerability in the formexeCommand function

Critical · published February 12, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
52.9
In the wild
Unconfirmed
What it is

🔥 A sneaky buffer overflow in Tenda AC6 firmware can turn your router into an open door for attackers! 🚪 Think of this vulnerability like a faulty delivery box that overflows with too many packages, spilling sensitive information everywhere. Instead of just holding your data, it invites unwanted guests right into your home network! An attacker could exploit this buffer overflow to execute arbitrary code on your router, gaining total control over your network. This could lead to data theft, unauthorized access to connected devices, and even manipulation of your internet traffic—absolutely devastating for your security!

Put simply

Think of this vulnerability like a faulty delivery box that overflows with too many packages, spilling sensitive information everywhere. Instead of just holding your data, it invites unwanted guests right into your home network! This vulnerability in the formexeCommand function allows an overflow of data to overflow the buffer, enabling attackers to run their own code. This oversight means that any rogue input can potentially compromise the router's integrity.

What to do

An attacker could exploit this buffer overflow to execute arbitrary code on your router, gaining total control over your network. This could lead to data theft, unauthorized access to connected devices, and even manipulation of your internet traffic—absolutely devastating for your security! Update the Tenda AC6 firmware to version V15.03.05.17 or later immediately to fix this critical vulnerability. Regularly check for firmware updates and consider changing default settings to enhance your device's security. 🔒 You've got this! By taking these steps, you'll be a security hero in no time! 🦸‍♂️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00709 · 52.9th percentile
Published
2025-02-12T00:00Z
EPSS history
Timeline
  • 12 FEB 00:00Z
    Tenda AC6 V15.03.05.16 firmware has a buffer overflow vulnerability in the formexeCommand function
    cvelistv5