CVE-2025-60342

Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the addressNat function

High · published October 22, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
35.4
In the wild
Unconfirmed
What it is

⚡ A crafty input can send your Tenda AC6 into a tailspin! It's causing a stack overflow that could lead to a Denial of Service. 🛑 Think of it like a restaurant getting a single order that’s just too big for the kitchen to handle—everything grinds to a halt, and nobody gets their food. This vulnerability overwhelms the addressNat function, making it hard for the router to serve up any requests! An attacker could exploit this flaw to flood the device with requests, causing it to crash and effectively deny service to legitimate users. This means your internet access could go dark, leaving you frustrated and disconnected—absolutely devastating!

Put simply

Think of it like a restaurant getting a single order that’s just too big for the kitchen to handle—everything grinds to a halt, and nobody gets their food. This vulnerability overwhelms the addressNat function, making it hard for the router to serve up any requests! The vulnerability arises from a stack overflow in the addressNat function caused by an overly large page parameter, allowing an attacker to trigger a Denial of Service (DoS) condition.

What to do

An attacker could exploit this flaw to flood the device with requests, causing it to crash and effectively deny service to legitimate users. This means your internet access could go dark, leaving you frustrated and disconnected—absolutely devastating! Immediately update your Tenda AC6 to the latest firmware version if available. Regularly check for updates and consider employing network monitoring to catch unusual traffic patterns before they lead to issues. You've got this! With a few quick actions, you can keep your network running smoothly and protect it from unexpected downtime. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00422 · 35.4th percentile
Published
2025-10-22T00:00Z
EPSS history
Timeline
  • 22 OCT 00:00Z
    Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the addressNat function
    cvelistv5