Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-25507

There is a RCE vulnerability in Tenda AC6 15.03.05.16_multi. In the formexeCommand function, the parameter cmdinput will cause remote command execution.

Published

2025-02-21T17:15:14.453

Last Modified

2025-04-10T13:37:05.443

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-94
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System tenda ac6_firmware 15.03.05.16_multi Yes
Hardware tenda ac6 - No
References