CVE-2025-52221
Received Received - Intake
Buffer Overflow in Tenda AC6 formSetCfm Function

Publication date: 2026-04-08

Last updated on: 2026-04-13

Assigner: MITRE

Description
Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the formSetCfm function via the funcname, funcpara1, and funcpara2 parameters.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-04-08
Last Modified
2026-04-13
Generated
2026-06-16
AI Q&A
2026-04-08
EPSS Evaluated
2026-06-15
NVD
CVE-2025-52221
EUVD
EUVD-2025-209313
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
tenda ac6_firmware 15.03.05.16_multi
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.
CWE-120 The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Impact Analysis

The vulnerability in Tenda AC6 15.03.05.16_multi involves a buffer overflow in the formSetCfm function via the funcname, funcpara1, and funcpara2 parameters.

This type of vulnerability can potentially allow an attacker to execute arbitrary code, cause a denial of service, or crash the device, leading to disruption of network services or unauthorized control over the device.

Executive Summary

The vulnerability in Tenda AC6 version 15.03.05.16_multi is a buffer overflow issue occurring in the formSetCfm function. It is triggered via the parameters funcname, funcpara1, and funcpara2.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-52221. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart