High severity7.5NVD Advisory· Published Mar 2, 2026· Updated Jun 17, 2026
CVE-2025-70252
CVE-2025-70252
Description
An issue was discovered in /goform/WifiWpsStart in Tenda AC6V2.0 V15.03.06.23_multi. The index and mode are controllable. If the conditions are met to sprintf, they will be spliced into tmp. It is worth noting that there is no size check,which leads to a stack overflow vulnerability.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:o:tenda:ac6_firmware:15.03.06.23_multi:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2- github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70252nvdExploitThird Party Advisory
- www.tenda.com.cn/material/show/2855nvdProduct
News mentions
0No linked articles in our index yet.