High severity7.7NVD Advisory· Published Sep 19, 2025· Updated Jun 17, 2026

CVE-2025-57528

Description

An issue was discovered in Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01 allowing attackers to cause a denial of service via the funcname, funcpara1, funcpara2 parameters to the formSetCfm function (uri path: SetCfm).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Tenda/AC6llm-fuzzy2 versions
US_AC6V1.0BR_V15.03.05.16_multi_TD01+ 1 more
- (no CPE)range: US_AC6V1.0BR_V15.03.05.16_multi_TD01
- (no CPE)
Tenda/Ac6 Firmware
cpe:2.3:o:tenda:ac6_firmware:15.03.05.16:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

github.com/faqiadegege/IoTVuln/blob/main/tendaAc6_formSetCfm_funcname_overflow/detail.mdnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.501
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000