GCVE - cpe:2.3:a:tenda:ac6:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:tenda:ac6:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Tenda (`cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42`)
Product	Ac6 (`6fd4a8d5-9485-5e04-a4a2-4f1d40e6bf6d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-7914`	vulnerable	2026-06-08 07:45:18.500379	Tenda AC6 httpd setparentcontrolinfo buffer overflow HIGH (8.8) A vulnerability has been found in Tenda AC6 15.03.06.50 and classified as critical. Affected by this vulnerability is the function setparentcontrolinfo of the component httpd. The manipulation leads to buffer overflow. The attack can be launched remotely. Published: 2025-07-21T00:02:07.481Z Updated: 2025-07-21T18:17:40.558Z Open on db.gcve.eu Reference links https://vuldb.com/?id.317029 https://vuldb.com/?ctiid.317029 https://vuldb.com/?submit.618859 https://github.com/gaochen61/IoTVuln/blob/main/Tenda_AC6_V15.03.06.50/setparentcontrolinfo.md https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-5855`	vulnerable	2026-06-08 07:37:25.916556	Tenda AC6 SetRebootTimer formSetRebootTimer stack-based overflow HIGH (8.8) A vulnerability, which was classified as critical, was found in Tenda AC6 15.03.05.16. This affects the function formSetRebootTimer of the file /goform/SetRebootTimer. The manipulation of the argument rebootTime leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2025-06-09T01:31:07.688Z Updated: 2025-06-09T03:01:14.273Z Open on db.gcve.eu Reference links https://vuldb.com/?id.311601 https://vuldb.com/?ctiid.311601 https://vuldb.com/?submit.591422 https://lavender-bicycle-a5a.notion.site/Tenda-AC6-formsetreboottimer-20a53a41781f80c5b6cac51008556c7e?source=copy_link https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-5854`	vulnerable	2026-06-08 07:37:25.916147	Tenda AC6 AdvSetLanip fromadvsetlanip buffer overflow HIGH (8.8) A vulnerability, which was classified as critical, has been found in Tenda AC6 15.03.05.16. Affected by this issue is the function fromadvsetlanip of the file /goform/AdvSetLanip. The manipulation of the argument lanMask leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2025-06-09T01:00:20.514Z Updated: 2025-06-09T03:02:29.951Z Open on db.gcve.eu Reference links https://vuldb.com/?id.311600 https://vuldb.com/?ctiid.311600 https://vuldb.com/?submit.591420 https://lavender-bicycle-a5a.notion.site/Tenda-AC6-fromadvsetlanip-20a53a41781f80a29bdff7dca9a4773e?source=copy_link https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-5853`	vulnerable	2026-06-08 07:37:25.915503	Tenda AC6 SetRemoteWebCfg formSetSafeWanWebMan stack-based overflow HIGH (8.8) A vulnerability classified as critical was found in Tenda AC6 15.03.05.16. Affected by this vulnerability is the function formSetSafeWanWebMan of the file /goform/SetRemoteWebCfg. The manipulation of the argument remoteIp leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2025-06-09T00:31:06.973Z Updated: 2025-06-09T03:03:54.041Z Open on db.gcve.eu Reference links https://vuldb.com/?id.311599 https://vuldb.com/?ctiid.311599 https://vuldb.com/?submit.591419 https://lavender-bicycle-a5a.notion.site/Tenda-AC6-formSetSafeWanWebMan-20a53a41781f80f1a3ebc7931f32a29f?source=copy_link https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-5852`	vulnerable	2026-06-08 07:37:25.912464	Tenda AC6 setPptpUserList formSetPPTPUserList buffer overflow HIGH (8.8) A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16. Affected is the function formSetPPTPUserList of the file /goform/setPptpUserList. The manipulation of the argument list leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2025-06-09T00:00:18.274Z Updated: 2025-06-09T03:05:34.620Z Open on db.gcve.eu Reference links https://vuldb.com/?id.311598 https://vuldb.com/?ctiid.311598 https://vuldb.com/?submit.591392 https://lavender-bicycle-a5a.notion.site/Tenda-AC6-formSetPPTPUserList-20a53a41781f801280e7e2dbdbd8625c?source=copy_link https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-1814`	vulnerable	2026-06-08 07:08:38.203996	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-0349`	vulnerable	2026-06-08 07:02:24.421202	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-10698`	vulnerable	2026-06-08 06:23:47.291003	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-10697`	vulnerable	2026-06-08 06:23:47.288974	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-10280`	vulnerable	2026-06-08 06:22:03.916462	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-2923`	vulnerable	2026-06-08 06:02:43.657226	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.