Tenda Ac6 vulnerabilities, page 3
109 vulnerabilities
Known vulnerabilities in Tenda Ac6, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2025-60338tenda · ac6_firmwaretenda ac6_firmwareTenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the DhcpListClient function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.49%HighCVE-2025-60343tenda · ac6_firmwaretenda ac6_firmwareMultiple buffer overflows in the AdvSetMacMtuWan function of Tenda AC6 v.15.03.06.50 allows attackers to cause a Denial of Service (DoS) via injecting a crafted payload into the wanMTU, wanSpeed, cloneType, mac, serviceName, serverName, wanMTU2, wanSpeed2, cloneType2, mac2, serviceName2, and serverName2 parameters.EPSS0.41%HighCVE-2025-60337tenda · ac6_firmwaretenda ac6_firmwareTenda AC6 V2.0 15.03.06.50 was discovered to contain a buffer overflow in the speed_dir parameter in the SetSpeedWan function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.41%HighCVE-2025-60339tenda · ac6_firmwaretenda ac6_firmwareMultiple buffer overflow vulnerabilities in the openSchedWifi function of Tenda AC6 v.15.03.06.50 allows attackers to cause a Denial of Service (DoS) via injecting a crafted payload into the schedStartTime and schedEndTime parameters.EPSS0.41%HighCVE-2025-60341tenda · ac6_firmwaretenda ac6_firmwareTenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the ssid parameter in the fast_setting_wifi_set function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.40%HighCVE-2025-60342tenda · ac6_firmwaretenda ac6_firmwareTenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the addressNat function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.42%HighCVE-2025-60340tenda · ac6_firmwaretenda ac6_firmwareMultiple buffer overflows in the SetClientState function of Tenda AC6 v.15.03.06.50 allows attackers to cause a Denial of Service (DoS) via injecting a crafted payload into the limitSpeed, deviceId, and limitSpeedUp parameters.EPSS0.41%HighCVE-2020-28095tenda · ac6_firmwaretenda ac6_firmwareOn Tenda AC1200 (Model AC6) 15.03.06.51_multi devices, a large HTTP POST request sent to the change password API will trigger the router to crash and enter an infinite boot loop.EPSS1.17%MediumCVE-2022-40010tenda · ac6_firmwaretenda ac6_firmwareTenda AC6 AC1200 Smart Dual-Band WiFi Router 15.03.06.50_multi was discovered to contain a cross-site scripting (XSS) vulnerability via the deviceId parameter in the Parental Control module.EPSS0.48%HighCVE-2022-41485tenda · ac6_firmware +1 moretenda ac6_firmwareTenda AC1200 US_AC6V2.0RTL_V15.03.06.51_multi_TDE01 was discovered to contain a buffer overflow in the 0x47ce00 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.EPSS0.93%CriticalCVE-2022-25451tenda · ac6_firmwaretenda ac6_firmwareTenda AC6 V15.03.05.09_multi was discovered to contain a stack overflow via the list parameter in the setstaticroutecfg function.EPSS1.69%CriticalCVE-2022-25461tenda · ac6_firmwaretenda ac6_firmwareTenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the startip parameter in the SetPptpServerCfg function.EPSS1.69%CriticalCVE-2022-25452tenda · ac6_firmwaretenda ac6_firmwareTenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the URLs parameter in the saveParentControlInfo function.EPSS1.69%CriticalCVE-2022-25450tenda · ac6_firmwaretenda ac6_firmwareTenda AC6 V15.03.05.09_multi was discovered to contain a stack overflow via the list parameter in the SetVirtualServerCfg function.EPSS11.55%CriticalCVE-2022-25449tenda · ac6_firmwaretenda ac6_firmwareTenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the deviceId parameter in the saveParentControlInfo function.EPSS1.69%CriticalCVE-2022-25455tenda · ac6_firmwaretenda ac6_firmwareTenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the list parameter in the SetIpMacBind function.EPSS1.69%CriticalCVE-2022-25447tenda · ac6_firmwaretenda ac6_firmwareTenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the schedendtime parameter in the openSchedWifi function.EPSS1.69%CriticalCVE-2022-25445tenda · ac6_firmwaretenda ac6_firmwareTenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the time parameter in the PowerSaveSet function.EPSS9.01%CriticalCVE-2022-25453tenda · ac6_firmwaretenda ac6_firmwareTenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the time parameter in the saveParentControlInfo function.EPSS1.69%CriticalCVE-2022-25460tenda · ac6_firmwaretenda ac6_firmwareTenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the endip parameter in the SetPptpServerCfg function.EPSS1.69%