CVE-2025-60343: Buffer Overflow

Published Oct 22, 2025

Updated

Multiple buffer overflows in the AdvSetMacMtuWan function of Tenda AC6 v.15.03.06.50 allows attackers to cause a Denial of Service (DoS) via injecting a crafted payload into the wanMTU, wanSpeed, cloneType, mac, serviceName, serverName, wanMTU2, wanSpeed2, cloneType2, mac2, serviceName2, and serverName2 parameters.

Affected Software

3 affected components

Tenda AC6

All of the following

Tenda Ac6 Firmware=15.03.06.50

Tenda AC6=2.0

Event History

Oct 22, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-60343?

CVE-2025-60343 is classified as a high severity vulnerability due to the potential for Denial of Service (DoS) attacks.

How do I fix CVE-2025-60343?

To fix CVE-2025-60343, update the Tenda AC6 firmware to the latest available version that addresses this vulnerability.

What are the risks associated with CVE-2025-60343?

The risks associated with CVE-2025-60343 include service disruption and potential downtime caused by Denial of Service attacks.

Which devices are affected by CVE-2025-60343?

CVE-2025-60343 affects the Tenda AC6 router version 15.03.06.50.

What is the function involved in CVE-2025-60343?

The function involved in CVE-2025-60343 is AdvSetMacMtuWan, which contains multiple buffer overflows.