CVE-2025-60339

Multiple buffer overflow vulnerabilities in the openSchedWifi function of Tenda AC6 v.15.03.06.50 allows attackers to cause a Denial of Service (DoS) via…

High · published October 22, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
33.9
In the wild
Unconfirmed
What it is

⚡ Just one clever payload can throw your Tenda AC6 into disarray! 🚨 Multiple buffer overflow vulnerabilities in the openSchedWifi function could lead to a devastating Denial of Service (DoS). Think of it like a restaurant where a diner slips a note to the chef to delay cooking. If enough of these notes get through, the entire kitchen grinds to a halt, causing chaos for everyone waiting for their meals! An attacker could inject crafted inputs into the schedStartTime and schedEndTime parameters, causing the router to crash and leaving your network in total disarray. Imagine all your devices suddenly unable to connect – a real nightmare for any home or office!

Put simply

Think of it like a restaurant where a diner slips a note to the chef to delay cooking. If enough of these notes get through, the entire kitchen grinds to a halt, causing chaos for everyone waiting for their meals! This vulnerability allows attackers to exploit buffer overflow issues in the openSchedWifi function of Tenda AC6 version 15.03.06.50, which can lead to a Denial of Service by causing the system to become unresponsive when specific payloads are sent.

What to do

An attacker could inject crafted inputs into the schedStartTime and schedEndTime parameters, causing the router to crash and leaving your network in total disarray. Imagine all your devices suddenly unable to connect – a real nightmare for any home or office! To protect your network, immediately upgrade your Tenda AC6 to the latest firmware version that addresses this issue. Regularly check for updates and avoid using vulnerable parameter values to minimize risk. You've got this! Follow these steps to secure your router and keep your network running smoothly. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00407 · 33.9th percentile
Published
2025-10-22T00:00Z
EPSS history
Timeline
  • 22 OCT 00:00Z
    Multiple buffer overflow vulnerabilities in the openSchedWifi function of Tenda AC6 v.15.03.06.50 allows attackers to cause a Denial of Service (DoS) via…
    cvelistv5