Tenda Ac6 vulnerabilities
109 vulnerabilities
Known vulnerabilities in Tenda Ac6, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-40546tendaac6_firmware
EPSS score0.73%
Tenda AC6 US_AC6V4.0RTL_V02.03.01.26_cn.bin allows attackers (who have the administrator password) to cause a denial of service (device crash) via a long string in the wifiPwd_5G parameter to /goform/setWifi.CVE-2025-52221tendaac6_firmwareEPSS score0.39%
Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the formSetCfm function via the funcname, funcpara1, and funcpara2 parameters.CVE-2025-1814tendaac6_firmwareEPSS score1.03%
A vulnerability, which was classified as critical, has been found in Tenda AC6 15.03.05.16. Affected by this issue is some unknown functionality of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk_crypto leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.CVE-2025-55498tendaac6_firmwareEPSS score0.40%
Tenda AC6 V15.03.06.23_multi was discovered to contain a buffer overflow via the time parameter in the fromSetSysTime function.CVE-2025-55482tendaac6_firmwareEPSS score0.40%
Tenda AC6 V15.03.06.23_multi is vulnerable to Buffer Overflow in the formSetCfm function.CVE-2025-55499tendaac6_firmwareEPSS score0.26%
Tenda AC6 V15.03.06.23_multi was discovered to contain a buffer overflow via the ntpServer parameter in the fromSetSysTime function.CVE-2025-55495tendaac6_firmwareEPSS score0.25%
Tenda AC6 V15.03.06.23_multi was discovered to contain a buffer overflow via the list parameter in the fromSetIpMacBind function.CVE-2025-55503tendaac6_firmwareEPSS score0.28%
Tenda AC6 V15.03.06.23_multi has a stack overflow vulnerability via the deviceName parameter in the saveParentControlInfo function.CVE-2025-55483tendaac6_firmwareEPSS score0.40%
Tenda AC6 V15.03.06.23_multi is vulnerable to Buffer Overflow in the function formSetMacFilterCfg via the parameters macFilterType and deviceList.CVE-2025-0349tendaac6_firmwareEPSS score1.92%
A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument src/mac leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.CVE-2025-31355tendaac6_firmware+1EPSS score0.30%
A firmware update vulnerability exists in the Firmware Signature Validation functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted malicious file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.CVE-2025-25505tendaac6_firmwareEPSS score0.30%
Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the sub_452A4 function.CVE-2025-25507tendaac6_firmwareEPSS score0.53%
There is a RCE vulnerability in Tenda AC6 15.03.05.16_multi. In the formexeCommand function, the parameter cmdinput will cause remote command execution.CVE-2025-25343tendaac6_firmwareEPSS score0.71%
Tenda AC6 V15.03.05.16 firmware has a buffer overflow vulnerability in the formexeCommand function.CVE-2025-7914tendaac6_firmwareEPSS score1.02%
A vulnerability has been found in Tenda AC6 15.03.06.50 and classified as critical. Affected by this vulnerability is the function setparentcontrolinfo of the component httpd. The manipulation leads to buffer overflow. The attack can be launched remotely.CVE-2025-29030tendaac6_firmwareEPSS score0.49%
Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formWifiWpsOOB function.CVE-2025-29121tendaac6_firmwareEPSS score0.48%
A vulnerability was found in Tenda AC6 V15.03.05.16. The vulnerability affects the functionality of the /goform/fast_setting_wifi_set file form_fast_setting_wifi_set. Using the timeZone parameter causes a stack-based buffer overflow.CVE-2025-29029tendaac6_firmwareEPSS score0.49%
Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formSetSpeedWan function.CVE-2025-29031tendaac6_firmwareEPSS score0.49%
Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the fromAddressNat function.CVE-2025-27129tendaac6_firmware+1EPSS score2.11%
An authentication bypass vulnerability exists in the HTTP authentication functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can send packets to trigger this vulnerability.