CVE-2025-29031

Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the fromAddressNat function

Critical · published March 14, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
41.4
In the wild
Unconfirmed
What it is

🚨 A buffer overflow lurking in the Tenda AC6 could turn your network into a playground for attackers! 🔥 Think of it like an overflowing sink that floods the entire kitchen. Just as the water spills over, this vulnerability allows data to spill into memory where it shouldn't be, creating a recipe for disaster. An attacker could exploit this vulnerability to execute malicious code remotely, effectively taking control of your router. This means they could intercept your data, redirect traffic, or unleash malware on your network. The potential for chaos in your connected home is absolutely devastating!

Put simply

Think of it like an overflowing sink that floods the entire kitchen. Just as the water spills over, this vulnerability allows data to spill into memory where it shouldn't be, creating a recipe for disaster. This vulnerability arises in the Tenda AC6's fromAddressNat function, which does not properly handle buffer sizes. This oversight can allow attackers to manipulate memory, leading to arbitrary code execution.

What to do

An attacker could exploit this vulnerability to execute malicious code remotely, effectively taking control of your router. This means they could intercept your data, redirect traffic, or unleash malware on your network. The potential for chaos in your connected home is absolutely devastating! To protect yourself, immediately update your Tenda AC6 router to the latest firmware version. Regularly check for updates and change your default login credentials to something secure. Also, consider monitoring your network traffic for any unusual activity. You've got this! Follow these steps, and you’ll have your network fortified in no time. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00492 · 41.4th percentile
Published
2025-03-14T00:00Z
EPSS history
Timeline
  • 14 MAR 00:00Z
    Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the fromAddressNat function
    cvelistv5