CVE-2025-60338

Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the DhcpListClient function

High · published October 22, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
41.1
In the wild
Unconfirmed
What it is

⚡ A crafty stack overflow lurks in the Tenda AC6's DHCP client function, leading to a potential DoS attack just waiting for the right input! 🔥 Think of it like a restaurant with a confusing menu: if too many complicated orders come in at once, it can overwhelm the kitchen, leaving hungry diners waiting indefinitely. Similarly, this stack overflow can choke the device, making it unusable. An attacker could exploit this vulnerability to force the Tenda AC6 router into a Denial of Service state, effectively knocking it offline and disrupting your network. Imagine the frustration when you can’t connect to the internet during your favorite streaming session!

Put simply

Think of it like a restaurant with a confusing menu: if too many complicated orders come in at once, it can overwhelm the kitchen, leaving hungry diners waiting indefinitely. Similarly, this stack overflow can choke the device, making it unusable. The vulnerability occurs due to a stack overflow in the DHCP client function, which can be triggered by specially crafted input in the 'page' parameter, potentially crashing the device.

What to do

An attacker could exploit this vulnerability to force the Tenda AC6 router into a Denial of Service state, effectively knocking it offline and disrupting your network. Imagine the frustration when you can’t connect to the internet during your favorite streaming session! To safeguard against this vulnerability, update your Tenda AC6 to the latest firmware version that addresses this issue. Regularly check for updates and consider implementing network monitoring to detect unusual traffic patterns. 🛡️ You've got this! Stay vigilant and keep your devices updated to prevent any hiccups in your network! 💪😊

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00489 · 41.1th percentile
Published
2025-10-22T00:00Z
EPSS history
Timeline
  • 22 OCT 00:00Z
    Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the DhcpListClient function
    cvelistv5