CVE-2025-6886
BaseFortify
Publication date: 2025-06-30
Last updated on: 2025-07-01
Assigner: VulDB
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| tenda | ac5_firmware | 15.03.06.47 |
| tenda | ac5 | 1.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-119 | The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data. |
| CWE-121 | A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a critical stack-based buffer overflow found in the Tenda AC5 router firmware version 15.03.06.47. It occurs in the handling of the schedStartTime and schedEndTime parameters within the /goform/openSchedWifi endpoint. Improper processing of these parameters allows an attacker to overflow the stack buffer, potentially leading to arbitrary code execution or denial of service. The attack can be launched remotely and is considered easy to exploit. [1, 2, 3]
How can this vulnerability impact me? :
Exploitation of this vulnerability can impact the confidentiality, integrity, and availability of the affected device. An attacker could execute arbitrary code remotely or cause a denial of service, potentially taking control of the router or disrupting its normal operation. [2]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
Detection can be performed by monitoring network traffic for POST requests to the /goform/openSchedWifi URI with suspicious or malformed schedStartTime or schedEndTime parameters that could trigger the buffer overflow. Using tools like curl or wget, you can attempt to send crafted POST requests to test the vulnerability. For example, a command to test might be: curl -X POST http://<router-ip>/goform/openSchedWifi -d "schedStartTime=AAAA...&schedEndTime=BBBB..." where the parameters contain oversized or malformed values. Additionally, network intrusion detection systems (NIDS) can be configured to alert on such suspicious POST requests targeting this endpoint. [1, 3]
What immediate steps should I take to mitigate this vulnerability?
Currently, no known countermeasures or mitigations exist for this vulnerability. The recommended immediate step is to replace the affected Tenda AC5 device with an alternative product. Until a patch or firmware update is released, restricting remote access to the device and disabling any remote management features may reduce exposure. [2]