CVE-2025-60337

Tenda AC6 V2.0 15.03.06.50 was discovered to contain a buffer overflow in the speed_dir parameter in the SetSpeedWan function

High · published October 22, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
34.2
In the wild
Unconfirmed
What it is

⚡ A crafty buffer overflow lurking in Tenda AC6’s SetSpeedWan function could spell trouble for your network! 🔥 Think of it like a traffic jam caused by a rogue delivery truck that blocks the entire road — one tiny miscalculation in the speed_dir parameter can bring your whole network to a standstill! If exploited, this vulnerability allows attackers to trigger a Denial of Service (DoS), knocking your network offline and leaving users unable to connect. Just imagine the chaos when everyone suddenly loses internet access — absolutely devastating for both productivity and morale!

Put simply

Think of it like a traffic jam caused by a rogue delivery truck that blocks the entire road — one tiny miscalculation in the speed_dir parameter can bring your whole network to a standstill! This buffer overflow vulnerability in Tenda AC6 (V2.0 15.03.06.50) occurs specifically in the speed_dir parameter handled by the SetSpeedWan function, enabling crafted input to crash the device.

What to do

If exploited, this vulnerability allows attackers to trigger a Denial of Service (DoS), knocking your network offline and leaving users unable to connect. Just imagine the chaos when everyone suddenly loses internet access — absolutely devastating for both productivity and morale! To protect against this, update your Tenda AC6 firmware to the latest version as soon as possible. It’s crucial to monitor traffic for any unusual patterns that could signal an attack. Don’t wait—get ahead of this! You've got this! With the right updates and vigilance, your network will be fortified in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00411 · 34.2th percentile
Published
2025-10-22T00:00Z
EPSS history
Timeline
  • 22 OCT 00:00Z
    Tenda AC6 V2.0 15.03.06.50 was discovered to contain a buffer overflow in the speed_dir parameter in the SetSpeedWan function
    cvelistv5