CVE-2025-24322 - An unsafe default authentication vulnerability exists in the Initial Setup Authentication functionality of Tenda AC6 V5.0 V02.03.01.110

Back Back to CVE browser

CRITICAL

An unsafe default authentication vulnerability exists in the Initial Setup Authentication functionality of Tenda AC6 V5.0 V02.03.01.110

Published Aug 20, 2025

9.8

CRITICAL

CVSS 3.1

EPSS 0.57%

Description

An unsafe default authentication vulnerability exists in the Initial Setup Authentication functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted network request can lead to arbitrary code execution. An attacker can browse to the device to trigger this vulnerability.

Affected products

Vendor Tenda Product AC6 V5.0 Default
n/a
- Version
  V02.03.01.110
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Tenda

AC6 V5.0

n/a

Version	Status	Constraints
V02.03.01.110	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-304

References (3)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-27717		Advisory
https://talosintelligence.com/vulnerability_reports/TALOS-2025-2163		Third Party Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2163