Approved changes feed: RSS · Atom

cpe:2.3:o:tenda:ac6_firmware:15.03.06.50:*:*:*:*:*:*:*

part: o version: 15.03.06.50 update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductAc6 Firmware (b38438dc-b30a-531e-8e0f-c4045c41eb1d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-7914 vulnerable 2026-06-08 07:45:18.501554 Tenda AC6 httpd setparentcontrolinfo buffer overflow
HIGH (8.8)
A vulnerability has been found in Tenda AC6 15.03.06.50 and classified as critical. Affected by this vulnerability is the function setparentcontrolinfo of the component httpd. The manipulation leads to buffer overflow. The attack can be launched remotely.
Published: 2025-07-21T00:02:07.481Z
Updated: 2025-07-21T18:17:40.558Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-60343 vulnerable 2026-06-08 07:37:26.888777 Details available
Multiple buffer overflows in the AdvSetMacMtuWan function of Tenda AC6 v.15.03.06.50 allows attackers to cause a Denial of Service (DoS) via injecting a crafted payload into the wanMTU, wanSpeed, cloneType, mac, serviceName, serverName, wanMTU2, wanSpeed2, cloneType2, mac2, serviceName2, and serverName2 parameters.
Published: 2025-10-22T00:00:00.000Z
Updated: 2025-10-23T13:58:28.931Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-60342 vulnerable 2026-06-08 07:37:26.888423 Details available
Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the addressNat function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
Published: 2025-10-22T00:00:00.000Z
Updated: 2025-10-23T14:45:35.470Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-60341 vulnerable 2026-06-08 07:37:26.887958 Details available
Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the ssid parameter in the fast_setting_wifi_set function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
Published: 2025-10-22T00:00:00.000Z
Updated: 2025-10-28T15:07:11.918Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-60340 vulnerable 2026-06-08 07:37:26.887669 Details available
Multiple buffer overflows in the SetClientState function of Tenda AC6 v.15.03.06.50 allows attackers to cause a Denial of Service (DoS) via injecting a crafted payload into the limitSpeed, deviceId, and limitSpeedUp parameters.
Published: 2025-10-22T00:00:00.000Z
Updated: 2025-10-28T15:07:31.877Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-60339 vulnerable 2026-06-08 07:37:26.886960 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-60338 vulnerable 2026-06-08 07:37:26.881627 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-60337 vulnerable 2026-06-08 07:37:26.879888 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12225 vulnerable 2026-06-08 07:04:29.895966 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51116 vulnerable 2026-06-08 06:52:11.709748 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-46450 vulnerable 2026-06-08 06:48:10.077789 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.