CVE-2025-57528: Input Validation
Published Sep 19, 2025
·Updated
An issue was discovered in Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01 allowing attackers to cause a denial of service via the funcname, funcpara1, funcpara2 parameters to the formSetCfm function (uri path: SetCfm).
Affected Software
3 affected components
Tenda AC6
All of the following
Tenda Ac6 Firmware=15.03.05.16
Tenda AC6=1.0
Event History
Sep 19, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-57528?
CVE-2025-57528 has a high severity due to the potential for denial of service attacks.
2
How do I fix CVE-2025-57528?
To mitigate CVE-2025-57528, update the firmware of the Tenda AC6 to the latest version provided by the vendor.
3
What are the affected devices for CVE-2025-57528?
CVE-2025-57528 specifically affects the Tenda AC6 router.
4
What type of attack does CVE-2025-57528 allow?
CVE-2025-57528 allows attackers to perform denial of service attacks on the affected device.
5
Is there a patch available for CVE-2025-57528?
Yes, a firmware update is required to patch CVE-2025-57528 and prevent exploitation.