CVE-2025-60341

Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the ssid parameter in the fast_setting_wifi_set function

High · published October 22, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
32.7
In the wild
Unconfirmed
What it is

⚡ A single crafty input is all it takes to trigger a stack overflow in Tenda AC6 routers! This vulnerability could turn your home network into a no-go zone. 🔥 Think of it like overstuffing a suitcase — if you cram in too much, the zipper might just burst, leaving your clothes (or in this case, your network) in disarray! An attacker can exploit this vulnerability to cause a Denial of Service (DoS), effectively shutting down your Wi-Fi and leaving all your devices without internet access. This could be absolutely devastating during those crucial Zoom meetings or Netflix binge sessions!

Put simply

Think of it like overstuffing a suitcase — if you cram in too much, the zipper might just burst, leaving your clothes (or in this case, your network) in disarray! The stack overflow occurs in the ssid parameter of the fast_setting_wifi_set function, allowing attackers to send specially crafted input that overwhelms the stack process.

What to do

An attacker can exploit this vulnerability to cause a Denial of Service (DoS), effectively shutting down your Wi-Fi and leaving all your devices without internet access. This could be absolutely devastating during those crucial Zoom meetings or Netflix binge sessions! To protect yourself, patch the firmware to a version after 15.03.06.50 as soon as possible. Regularly monitor your network settings to ensure no unauthorized changes have been made. 🛡️ You've got this! With these steps, you'll have your router secure and functioning smoothly in no time! 🌟

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00397 · 32.7th percentile
Published
2025-10-22T00:00Z
EPSS history
Timeline
  • 22 OCT 00:00Z
    Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the ssid parameter in the fast_setting_wifi_set function
    cvelistv5