CVE-2025-29030

Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formWifiWpsOOB function

Critical · published March 14, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
41.4
In the wild
Unconfirmed
What it is

🔥 A single mismanaged input could unlock chaos in Tenda AC6 routers! Think of it like an overstuffed suitcase that bursts open when zipped too tightly — this buffer overflow lets attackers overflow data where it's not meant to go, causing a bit of a mess! If exploited, an attacker could execute arbitrary code on the router, effectively giving them full control over your network! This is absolutely devastating, allowing them to intercept your traffic, modify settings, or even take down your internet. You wouldn't want a stranger rummaging through your belongings, would you?

Put simply

Think of it like an overstuffed suitcase that bursts open when zipped too tightly — this buffer overflow lets attackers overflow data where it's not meant to go, causing a bit of a mess! This vulnerability exists in the formWifiWpsOOB function of the Tenda AC6 router, where improper handling of input data allows for a buffer overflow, leading to possible remote code execution without authentication.

What to do

If exploited, an attacker could execute arbitrary code on the router, effectively giving them full control over your network! This is absolutely devastating, allowing them to intercept your traffic, modify settings, or even take down your internet. You wouldn't want a stranger rummaging through your belongings, would you? Immediately update your Tenda AC6 to version 15.03.05.17 or later to patch this vulnerability. Review your network security settings, and consider disabling WPS if not in use while you ensure your devices are secure. You've got this! Stay vigilant and follow these steps to keep your network safe and sound! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00492 · 41.4th percentile
Published
2025-03-14T00:00Z
EPSS history
Timeline
  • 14 MAR 00:00Z
    Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formWifiWpsOOB function
    cvelistv5