CVE-2025-60342
BaseFortify
Publication date: 2025-10-22
Last updated on: 2025-10-23
Assigner: MITRE
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| tenda | ac6_firmware | 15.03.06.50 |
| tenda | ac6 | 2.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-787 | The product writes data past the end, or before the beginning, of the intended buffer. |
| CWE-121 | A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a stack overflow in the 'page' parameter of the addressNat function in Tenda AC6 V2.0 15.03.06.50. A stack overflow occurs when more data is written to a buffer on the stack than it can hold, which can corrupt data, crash the system, or allow execution of malicious code. In this case, the vulnerability allows attackers to cause a Denial of Service (DoS) by sending crafted input that triggers the overflow.
How can this vulnerability impact me? :
The vulnerability can impact you by causing a Denial of Service (DoS) on the affected Tenda AC6 device. This means that an attacker can make the device unavailable or unresponsive by exploiting the stack overflow with specially crafted input, potentially disrupting network connectivity or services relying on the device.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
Detection of this vulnerability involves monitoring for crashes or Denial of Service symptoms triggered by malformed inputs to the addressNat function's page parameter on Tenda AC6 V2.0 15.03.06.50 devices. Specific commands are not provided in the available resources, but reviewing logs for crashes or unusual behavior related to addressNat requests may help identify exploitation attempts. [1]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include restricting access to the vulnerable Tenda AC6 device, especially limiting exposure of the addressNat function to untrusted networks, and monitoring for suspicious inputs. Applying any available firmware updates or patches from the vendor is recommended once available. [1]