CVE-2025-60338: High severity Tenda AC6 vulnerability
Published Oct 22, 2025
·Updated
Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the DhcpListClient function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
Affected Software
3 affected components
Tenda AC6
All of the following
Tenda Ac6 Firmware=15.03.06.50
Tenda AC6=2.0
Event History
Oct 22, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-60338?
CVE-2025-60338 is classified as a high severity vulnerability due to its potential to cause a Denial of Service attack.
2
How do I fix CVE-2025-60338?
To fix CVE-2025-60338, users should update their Tenda AC6 firmware to the latest version that addresses this vulnerability.
3
What type of vulnerability is CVE-2025-60338?
CVE-2025-60338 is a stack overflow vulnerability located in the DhcpListClient function.
4
What systems are affected by CVE-2025-60338?
CVE-2025-60338 affects Tenda AC6 routers running firmware version 15.03.06.50.
5
What can attackers do with CVE-2025-60338?
Attackers can exploit CVE-2025-60338 to execute a Denial of Service attack through crafted inputs.