CVE-2025-60661: Medium severity Tenda Ac18 vulnerability
Published Oct 2, 2025
·Updated
Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the cloneType parameter in the fromAdvSetMacMtuWan function.
Affected Software
3 affected components
Tenda Ac18
All of the following
Tenda Ac18 Firmware=15.03.05.19
Tenda Ac18
Event History
Oct 2, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-60661?
The severity of CVE-2025-60661 is categorized as critical due to its potential to allow remote code execution.
2
How do I fix CVE-2025-60661?
To fix CVE-2025-60661, update your Tenda AC18 firmware to the latest version provided by the vendor.
3
What systems are affected by CVE-2025-60661?
CVE-2025-60661 affects Tenda AC18 devices running firmware version V15.03.05.19.
4
What type of vulnerability is CVE-2025-60661?
CVE-2025-60661 is a stack overflow vulnerability that can be exploited through the cloneType parameter.
5
Can CVE-2025-60661 be exploited remotely?
Yes, CVE-2025-60661 can be exploited remotely, allowing attackers to execute arbitrary code on the affected device.