CVE-2025-32010

A stack-based buffer overflow vulnerability exists in the Cloud API functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted HTTP response can lead to arbitrary code execution. An attacker can send an HTTP response to trigger this vulnerability.

CVSS v3 8.1 HIGH

8.1^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://talosintelligence.com/vulnerability_reports/TALOS-2025-2168	Third Party Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2168

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:tenda:ac6_firmware:02.03.01.110:*:*:*:*:*:*:*

cpe:2.3:h:tenda:ac6:5.0:*:*:*:*:*:*:*

History

03 Nov 2025, 19:15

Type	Values Removed	Values Added
References		() https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2168 -

21 Aug 2025, 18:22

Type	Values Removed	Values Added
Summary		(es) Existe una vulnerabilidad de desbordamiento de búfer en la pila de la API de nube de Tenda AC6 V5.0 V02.03.01.110. Una respuesta HTTP especialmente manipulada puede provocar la ejecución de código arbitrario. Un atacante puede enviar una respuesta HTTP para activar esta vulnerabilidad.
First Time		Tenda ac6 Firmware Tenda Tenda ac6
References	~~() https://talosintelligence.com/vulnerability_reports/TALOS-2025-2168 -~~	() https://talosintelligence.com/vulnerability_reports/TALOS-2025-2168 - Third Party Advisory
CPE		cpe:2.3:h:tenda:ac6:5.0:::::::* cpe:2.3:o:tenda:ac6_firmware:02.03.01.110:::::::*

20 Aug 2025, 14:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-08-20 14:15

Updated : 2025-11-03 19:15

NVD link : CVE-2025-32010

Mitre link : CVE-2025-32010

CVE.ORG link : CVE-2025-32010

JSON object : View

Products Affected

tenda

ac6_firmware
ac6

CWE

CWE-121

Stack-based Buffer Overflow

{"id": "CVE-2025-32010", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "talos-cna@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.2}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2025-08-20T14:15:43.557", "references": [{"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2025-2168", "tags": ["Third Party Advisory"], "source": "talos-cna@cisco.com"}, {"url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2168", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "talos-cna@cisco.com", "description": [{"lang": "en", "value": "CWE-121"}]}], "descriptions": [{"lang": "en", "value": "A stack-based buffer overflow vulnerability exists in the Cloud API functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted HTTP response can lead to arbitrary code execution. An attacker can send an HTTP response to trigger this vulnerability."}, {"lang": "es", "value": "Existe una vulnerabilidad de desbordamiento de b\u00fafer en la pila de la API de nube de Tenda AC6 V5.0 V02.03.01.110. Una respuesta HTTP especialmente manipulada puede provocar la ejecuci\u00f3n de c\u00f3digo arbitrario. Un atacante puede enviar una respuesta HTTP para activar esta vulnerabilidad."}], "lastModified": "2025-11-03T19:15:51.987", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:tenda:ac6_firmware:02.03.01.110:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FBBF7445-03C8-48EA-9DC3-BD4825E7CC0A"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:tenda:ac6:5.0:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CFBE582F-BE50-4810-AAB2-B19F40693ACE"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "talos-cna@cisco.com"}