CVE-2025-60343

Multiple buffer overflows in the AdvSetMacMtuWan function of Tenda AC6 v.15.03.06.50 allows attackers to cause a Denial of Service (DoS) via injecting a…

High · published October 22, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
33.9
In the wild
Unconfirmed
What it is

⚡ Multiple buffer overflows in the Tenda AC6 can bring your network to its knees with just a cleverly crafted payload! Think of this vulnerability like a plumbing system that can’t handle too much pressure. Injecting the wrong type of water causes catastrophic leaks, leading to a full meltdown—or in this case, a Denial of Service that takes down your internet connection! If an attacker exploits this vulnerability, they can flood the router with malicious inputs, resulting in a complete service outage. This means no internet access for you or anyone else connected to the device—a scenario that can be absolutely devastating for any home or office relying on connectivity!

Put simply

Think of this vulnerability like a plumbing system that can’t handle too much pressure. Injecting the wrong type of water causes catastrophic leaks, leading to a full meltdown—or in this case, a Denial of Service that takes down your internet connection! The AdvSetMacMtuWan function in Tenda AC6 versions 15.03.06.50 is vulnerable to multiple buffer overflows, allowing attackers to inject crafted inputs into various parameters, leading to potential DoS conditions.

What to do

If an attacker exploits this vulnerability, they can flood the router with malicious inputs, resulting in a complete service outage. This means no internet access for you or anyone else connected to the device—a scenario that can be absolutely devastating for any home or office relying on connectivity! To safeguard your network, update your Tenda AC6 router to the latest firmware version as soon as it’s available. Regularly review your device settings and monitor for unusual activity that could indicate an attempted exploit. You've got this! By following these steps, you’ll strengthen your defenses and keep your internet safe and sound! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00407 · 33.9th percentile
Published
2025-10-22T00:00Z
EPSS history
Timeline
  • 22 OCT 00:00Z
    Multiple buffer overflows in the AdvSetMacMtuWan function of Tenda AC6 v.15.03.06.50 allows attackers to cause a Denial of Service (DoS) via injecting a…
    cvelistv5