VYPR
Unrated severityNVD Advisory· Published Jun 9, 2025· Updated Jun 9, 2025

Tenda AC6 SetRemoteWebCfg formSetSafeWanWebMan stack-based overflow

CVE-2025-5853

Description

A vulnerability classified as critical was found in Tenda AC6 15.03.05.16. Affected by this vulnerability is the function formSetSafeWanWebMan of the file /goform/SetRemoteWebCfg. The manipulation of the argument remoteIp leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected products

2
  • Tenda/AC6llm-fuzzy
    Range: = 15.03.05.16
  • Tenda/AC6v5
    Range: 15.03.05.16

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

News mentions

0

No linked articles in our index yet.