CVE-2025-29121

HIGH

Tenda AC6 V15.03.05.16 - Stack-based Buffer Overflow via timeZone Parameter

Title source: llm

Description

A vulnerability was found in Tenda AC6 V15.03.05.16. The vulnerability affects the functionality of the /goform/fast_setting_wifi_set file form_fast_setting_wifi_set. Using the timeZone parameter causes a stack-based buffer overflow.

References (1)

Core 1

Core References

Exploit, Third Party Advisory

https://github.com/Raining-101/IOT_cve/blob/main/ac6_form_fast_setting_wifi_set%20_timeZone.md

Scores

CVSS v3 7.5

EPSS 0.0033

EPSS Percentile 55.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation poc

Automatable yes

Technical Impact partial

Details

CWE

CWE-121

Status published

Products (1)

tenda/ac6_firmware 15.03.05.16

Published Mar 20, 2025

Tracked Since Feb 18, 2026