Approved changes feed: RSS · Atom

cpe:2.3:a:tenda:ac6:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductAc6 (6fd4a8d5-9485-5e04-a4a2-4f1d40e6bf6d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-7914 vulnerable 2026-06-08 07:45:18.500379 db.gcve.eu details are currently unavailable. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5855 vulnerable 2026-06-08 07:37:25.916556 Tenda AC6 SetRebootTimer formSetRebootTimer stack-based overflow
HIGH (8.8)
A vulnerability, which was classified as critical, was found in Tenda AC6 15.03.05.16. This affects the function formSetRebootTimer of the file /goform/SetRebootTimer. The manipulation of the argument rebootTime leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-09T01:31:07.688Z
Updated: 2025-06-09T03:01:14.273Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5854 vulnerable 2026-06-08 07:37:25.916147 Tenda AC6 AdvSetLanip fromadvsetlanip buffer overflow
HIGH (8.8)
A vulnerability, which was classified as critical, has been found in Tenda AC6 15.03.05.16. Affected by this issue is the function fromadvsetlanip of the file /goform/AdvSetLanip. The manipulation of the argument lanMask leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-09T01:00:20.514Z
Updated: 2025-06-09T03:02:29.951Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5853 vulnerable 2026-06-08 07:37:25.915503 Tenda AC6 SetRemoteWebCfg formSetSafeWanWebMan stack-based overflow
HIGH (8.8)
A vulnerability classified as critical was found in Tenda AC6 15.03.05.16. Affected by this vulnerability is the function formSetSafeWanWebMan of the file /goform/SetRemoteWebCfg. The manipulation of the argument remoteIp leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-09T00:31:06.973Z
Updated: 2025-06-09T03:03:54.041Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5852 vulnerable 2026-06-08 07:37:25.912464 db.gcve.eu details are currently unavailable. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1814 vulnerable 2026-06-08 07:08:38.203996 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0349 vulnerable 2026-06-08 07:02:24.421202 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10698 vulnerable 2026-06-08 06:23:47.291003 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10697 vulnerable 2026-06-08 06:23:47.288974 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10280 vulnerable 2026-06-08 06:22:03.916462 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2923 vulnerable 2026-06-08 06:02:43.657226 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.