CVE-2025-25505

Summary

CVE-2025-25505 identifies a buffer overflow vulnerability affecting the Tenda AC6 device with firmware version 15.03.05.16_multi. The sub_452A4 function in the affected system is the culprit, allowing an attacker to potentially inject malicious data that may cause the buffer to overflow, leading to unintended system behavior or crashes. Successful exploitation of this vulnerability could provide an attacker with remote code execution capabilities, posing a significant risk to network security. It is recommended that users update their Tenda AC6 firmware to a patch released by the vendor to mitigate this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.