CVE-2025-60339: Buffer Overflow

Published Oct 22, 2025

Updated

Multiple buffer overflow vulnerabilities in the openSchedWifi function of Tenda AC6 v.15.03.06.50 allows attackers to cause a Denial of Service (DoS) via injecting a crafted payload into the schedStartTime and schedEndTime parameters.

Affected Software

3 affected components

Tenda AC6

All of the following

Tenda Ac6 Firmware=15.03.06.50

Tenda AC6=2.0

Event History

Oct 22, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-60339?

CVE-2025-60339 is rated as a high severity vulnerability due to its potential to cause Denial of Service.

How do I fix CVE-2025-60339?

To fix CVE-2025-60339, update the Tenda AC6 firmware to the latest version provided by the vendor.

What causes CVE-2025-60339?

CVE-2025-60339 is caused by multiple buffer overflow vulnerabilities in the openSchedWifi function due to improper handling of input parameters.

What are the risks associated with CVE-2025-60339?

The risks associated with CVE-2025-60339 include the potential for attackers to execute Denial of Service attacks.

Which devices are affected by CVE-2025-60339?

CVE-2025-60339 affects Tenda AC6 devices running firmware version 15.03.06.50.