CVE-2025-0349

CWE-119 — Buffer OverflowCWE-121 — Stack-based Buffer OverflowCWE-787 — Out-of-bounds Write3 documents3 sources
Severity
8.7HIGH
EPSS
0.3%
top 43.46%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Tenda AC6Tenda AC6 Firmware
Timeline
PublishedJan 9

Description

A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument src/mac leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5tenda/ac615.03.05.16
▶NVDtenda/ac6_firmware15.03.05.16

🔴Vulnerability Details

2
GHSA
GHSA-5r5h-j8r7-pr7g: A vulnerability classified as critical has been found in Tenda AC6 15↗2025-01-09
▶
CVEList
Tenda AC6 GetParentControlInfo stack-based overflow↗2025-01-09
▶