CVE-2025-7914

CWE-119 — Buffer OverflowCWE-120 — Classic Buffer Overflow3 documents3 sources
Severity
8.7HIGH
EPSS
0.3%
top 44.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Tenda AC6Tenda AC6 Firmware
Timeline
PublishedJul 21

Description

A vulnerability has been found in Tenda AC6 15.03.06.50 and classified as critical. Affected by this vulnerability is the function setparentcontrolinfo of the component httpd. The manipulation leads to buffer overflow. The attack can be launched remotely.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5tenda/ac615.03.06.50
▶NVDtenda/ac6_firmware15.03.06.50

🔴Vulnerability Details

2
CVEList
Tenda AC6 httpd setparentcontrolinfo buffer overflow↗2025-07-21
▶
GHSA
GHSA-wq2q-3cwm-29r2: A vulnerability has been found in Tenda AC6 15↗2025-07-21
▶