CVE-2025-5854

Name of the Vulnerable Software and Affected Versions Tenda AC6 version 15.03.05.16

Description A critical issue has been found in the function fromadvsetlanip of the file /goform/AdvSetLanip. The manipulation of the argument lanMask leads to buffer overflow. The attack may be launched remotely.

Recommendations For Tenda AC6 version 15.03.05.16, as a temporary workaround, consider restricting access to the /goform/AdvSetLanip endpoint to minimize the risk of exploitation. Avoid using the lanMask argument in the affected function until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.