BaseFortify

Publication date: 2025-10-22

Last updated on: 2025-10-28

Assigner: MITRE

Description

Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the ssid parameter in the fast_setting_wifi_set function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-22

Last Modified

2025-10-28

Generated

2026-07-06

AI Q&A

2025-10-22

EPSS Evaluated

2026-07-04

NVD

CVE-2025-60341

Affected Vendors & Products

Vendor	Product	Version / Range
tenda	ac6_firmware	15.03.06.50
tenda	ac6	2.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is a stack overflow in the ssid parameter within the fast_setting_wifi_set function of the Tenda AC6 V2.0 15.03.06.50 firmware. An attacker can exploit this by sending a specially crafted input to cause the stack overflow. [1]

Impact Analysis

Exploiting this vulnerability can cause a Denial of Service (DoS) condition, meaning the affected device or service may crash or become unavailable.

Hi! I’m here to help you understand CVE-2025-60341. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70