CVE-2025-32010 - A stack-based buffer overflow vulnerability exists in the Cloud API functionality of Tenda AC6 V5.0 V02.03.01.110

Back Back to CVE browser

CRITICAL

A stack-based buffer overflow vulnerability exists in the Cloud API functionality of Tenda AC6 V5.0 V02.03.01.110

Published Aug 20, 2025

9.8

CRITICAL

CVSS 3.1

EPSS 0.69%

Description

A stack-based buffer overflow vulnerability exists in the Cloud API functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted HTTP response can lead to arbitrary code execution. An attacker can send an HTTP response to trigger this vulnerability.

Affected products

Vendor Tenda Product AC6 V5.0 Default
unknown
Affected
- V02.03.01.110

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Tenda	AC6 V5.0	unknown	Affected V02.03.01.110

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-121

References (3)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-27818		Advisory
https://talosintelligence.com/vulnerability_reports/TALOS-2025-2168		Third Party Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2168

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner talos

Published Aug 20, 2025

Updated Nov 3, 2025

Reserved Apr 1, 2025

Link CVE-2025-32010

CISA Vulnrichment

Updated Aug 20, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2025-32010

Red Hat

No data

ENISA EUVD

Assigner talos

Published Aug 20, 2025

Updated Nov 3, 2025

Link EUVD-2025-27818

GitHub

No data