CVE-2025-60337
BaseFortify
Publication date: 2025-10-22
Last updated on: 2025-10-27
Assigner: MITRE
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| tenda | ac6_firmware | 15.03.06.50 |
| tenda | ac6 | 2.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-787 | The product writes data past the end, or before the beginning, of the intended buffer. |
| CWE-120 | The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a buffer overflow in the speed_dir parameter within the SetSpeedWan function of the Tenda AC6 V2.0 15.03.06.50 firmware. A buffer overflow occurs when more data is written to a buffer than it can hold, which can cause unexpected behavior or crashes. In this case, an attacker can send specially crafted input to trigger the overflow.
How can this vulnerability impact me? :
This vulnerability can allow an attacker to cause a Denial of Service (DoS) on the affected device by exploiting the buffer overflow with crafted input, potentially making the device unavailable or unstable.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
Detection of this vulnerability involves monitoring for unusual crashes or Denial of Service symptoms related to the Tenda AC6 router, specifically triggered by malformed inputs to the speed_dir parameter in the SetSpeedWan function. Since this is a buffer overflow triggered by crafted input, network traffic analysis tools could be used to detect suspicious packets targeting the speed_dir parameter. However, no specific detection commands are provided in the available resources. [1]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include restricting access to the router's management interface to trusted users only, applying any available firmware updates from Tenda addressing this issue, and monitoring for unusual device behavior indicating exploitation attempts. If no patch is available, consider disabling remote management or isolating the device from untrusted networks to prevent exploitation via crafted inputs to the speed_dir parameter. [1]