CVE-2025-60340: Buffer Overflow

Published Oct 22, 2025

Updated

Multiple buffer overflows in the SetClientState function of Tenda AC6 v.15.03.06.50 allows attackers to cause a Denial of Service (DoS) via injecting a crafted payload into the limitSpeed, deviceId, and limitSpeedUp parameters.

Affected Software

3 affected components

Tenda AC6

All of the following

Tenda Ac6 Firmware=15.03.06.50

Tenda AC6=2.0

Event History

Oct 22, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-60340?

CVE-2025-60340 is classified as a high severity vulnerability due to its potential to cause Denial of Service (DoS) attacks.

How do I fix CVE-2025-60340?

To fix CVE-2025-60340, update the Tenda AC6 firmware to the latest version provided by the vendor.

What are the main affected components in CVE-2025-60340?

The main components affected by CVE-2025-60340 are the SetClientState function and its parameters: limitSpeed, deviceId, and limitSpeedUp.

What is the impact of exploiting CVE-2025-60340?

Exploiting CVE-2025-60340 can lead to a Denial of Service (DoS), making the affected device unresponsive.

Who is affected by CVE-2025-60340?

Users of Tenda AC6 with firmware version 15.03.06.50 are affected by CVE-2025-60340.