CVE-2025-0349
Tenda AC6 GetParentControlInfo stack-based overflow
Vexday Risk Score
21Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 8.7EPSS 1.8%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
09 jan 2025Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument src/mac leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Tenda · AC6Quer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →