← back
CVE-2025-7914

Tenda AC6 httpd setparentcontrolinfo buffer overflow

CVSS 8.7 HIGHEPSS 0.8%CWE-119CWE-120
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 8.7EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
21 Jul 2025Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A vulnerability has been found in Tenda AC6 15.03.06.50 and classified as critical. Affected by this vulnerability is the function setparentcontrolinfo of the component httpd. The manipulation leads to buffer overflow. The attack can be launched remotely.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X
Affected products
Tenda · AC6

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://github.com/gaochen61/IoTVuln/blob/main/Tenda_AC6_V15.03.06.50/setparentcontrolinfo.mdhttps://vuldb.com/?ctiid.317029https://vuldb.com/?id.317029https://vuldb.com/?submit.618859https://www.tenda.com.cn/