← Back

Ac6 Firmware

ac6_firmware

Vendor: Tenda • 108 CVEs

CVEs (108)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Tenda
1Ac6 Firmware
Jun 9, 2025
Jun 9, 2025
7.4 HIGH· v4
8.8 HIGH· v3
9.0 HIGH· v2
A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16. Affected is the function formSetPPTPUserList of the file /goform/setPptpUserList. The manipulation of the argument list leads to buffer over...Show more
A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16. Affected is the function formSetPPTPUserList of the file /goform/setPptpUserList. The manipulation of the argument list leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.Show less
1Tenda
1Ac6 Firmware
Jun 3, 2025
Jun 2, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Tenda AC6 V15.03.05.16 was discovered to contain a stack overflow via the time parameter in the setSmartPowerManagement function.
1Tenda
1Ac6 Firmware
Mar 28, 2025
Mar 20, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
A vulnerability was found in Tenda AC6 V15.03.05.16. The vulnerability affects the functionality of the /goform/fast_setting_wifi_set file form_fast_setting_wifi_set. Using the timeZone parameter causes a stack-based buf...Show more
A vulnerability was found in Tenda AC6 V15.03.05.16. The vulnerability affects the functionality of the /goform/fast_setting_wifi_set file form_fast_setting_wifi_set. Using the timeZone parameter causes a stack-based buffer overflow.Show less
1Tenda
1Ac6 Firmware
Mar 19, 2025
Mar 14, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the fromAddressNat function.
1Tenda
1Ac6 Firmware
Mar 19, 2025
Mar 14, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formWifiWpsOOB function.
1Tenda
1Ac6 Firmware
Mar 18, 2025
Mar 14, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formSetSpeedWan function.
1Tenda
1Ac6 Firmware
Mar 5, 2025
Mar 2, 2025
8.7 HIGH· v4
9.8 CRITICAL· v3
9.0 HIGH· v2
A vulnerability, which was classified as critical, has been found in Tenda AC6 15.03.05.16. Affected by this issue is some unknown functionality of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk_c...Show more
A vulnerability, which was classified as critical, has been found in Tenda AC6 15.03.05.16. Affected by this issue is some unknown functionality of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk_crypto leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.Show less
1Tenda
1Ac6 Firmware
Apr 10, 2025
Feb 21, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
There is a RCE vulnerability in Tenda AC6 15.03.05.16_multi. In the formexeCommand function, the parameter cmdinput will cause remote command execution.
1Tenda
1Ac6 Firmware
Apr 10, 2025
Feb 21, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the sub_452A4 function.
1Tenda
1Ac6 Firmware
Mar 5, 2025
Feb 12, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC6 V15.03.05.16 firmware has a buffer overflow vulnerability in the formexeCommand function.
1Tenda
1Ac6 Firmware
Jul 7, 2025
Jan 16, 2025
N/A· v4
8.1 HIGH· v3
N/A· v2
Incorrect access control in Tenda AC1200 Smart Dual-Band WiFi Router Model AC6 v2.0 Firmware v15.03.06.50 allows attackers to bypass authentication via a crafted web request.
1Tenda
1Ac6 Firmware
Mar 22, 2025
Jan 9, 2025
8.7 HIGH· v4
9.8 CRITICAL· v3
9.0 HIGH· v2
A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument src/mac leads to st...Show more
A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument src/mac leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.Show less
1Tenda
1Ac6 Firmware
May 28, 2025
Dec 4, 2024
8.3 HIGH· v4
9.8 CRITICAL· v3
N/A· v2
Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (fromWizardHandle modules) allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50.
1Tenda
1Ac6 Firmware
May 28, 2025
Dec 4, 2024
8.3 HIGH· v4
9.8 CRITICAL· v3
N/A· v2
Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (setDoubleL2tpConfig->guest_ip_check(overflow arg: mask) modules) allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.0...Show more
Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (setDoubleL2tpConfig->guest_ip_check(overflow arg: mask) modules) allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50Show less
1Tenda
1Ac6 Firmware
May 28, 2025
Dec 4, 2024
8.3 HIGH· v4
9.8 CRITICAL· v3
N/A· v2
Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (setDoublePppoeConfig->guest_ip_check(overflow arg: mask) modules) allows Overflow Buffers.This issue affects Tenda AC6V2: through 15....Show more
Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (setDoublePppoeConfig->guest_ip_check(overflow arg: mask) modules) allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50Show less
1Tenda
1Ac6 Firmware
May 28, 2025
Dec 4, 2024
8.3 HIGH· v4
9.8 CRITICAL· v3
N/A· v2
Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (fromAdvSetLanip(overflow arg:lanMask) modules) allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50
1Tenda
1Ac6 Firmware
Nov 20, 2024
Nov 19, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC6 v2.0 v15.03.06.50 was discovered to contain a buffer overflow in the function 'fromSetSysTime.
1Tenda
1Ac6 Firmware
Apr 9, 2025
Nov 5, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Tenda AC6 v2.0 V15.03.06.50 was discovered to contain a buffer overflow in the function 'formSetPPTPServer'.
1Tenda
1Ac6 Firmware
Nov 4, 2024
Nov 2, 2024
8.7 HIGH· v4
9.8 CRITICAL· v3
9.0 HIGH· v2
A vulnerability was found in Tenda AC6 15.03.05.19 and classified as critical. Affected by this issue is the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads...Show more
A vulnerability was found in Tenda AC6 15.03.05.19 and classified as critical. Affected by this issue is the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.Show less
1Tenda
1Ac6 Firmware
Apr 5, 2025
Nov 2, 2024
5.3 MEDIUM· v4
9.8 CRITICAL· v3
6.5 MEDIUM· v2
A vulnerability has been found in Tenda AC6 15.03.05.19 and classified as critical. Affected by this vulnerability is the function formWriteFacMac of the file /goform/WriteFacMac of the component API Endpoint. The manipu...Show more
A vulnerability has been found in Tenda AC6 15.03.05.19 and classified as critical. Affected by this vulnerability is the function formWriteFacMac of the file /goform/WriteFacMac of the component API Endpoint. The manipulation of the argument mac leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.Show less