ГлавнаяУязвимости → CVE-2025-5852
8.8высокая

CVE-2025-5852

Описание

A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16. Affected is the function formSetPPTPUserList of the file /goform/setPptpUserList. The manipulation of the argument list leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Затрагиваемое ПО
Tenda Ac6 firmwareTenda Ac6
CVSS
Балл8.8 — высокая
ВекторCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Источники
https://lavender-bicycle-a5a.notion.site/Tenda-AC6-formSetPPTPUserList-20a53a41781f801280e7e2dbdbd8625c?source=copy_linkhttps://vuldb.com/?ctiid.311598https://vuldb.com/?id.311598https://vuldb.com/?submit.591392https://www.tenda.com.cn/