CVE-2025-24322

An unsafe default authentication vulnerability exists in the Initial Setup Authentication functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted network request can lead to arbitrary code execution. An attacker can browse to the device to trigger this vulnerability.

CVSS v3 8.1 HIGH

8.1^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://talosintelligence.com/vulnerability_reports/TALOS-2025-2163	Third Party Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:tenda:ac6_firmware:02.03.01.110:*:*:*:*:*:*:*

cpe:2.3:h:tenda:ac6:5.0:*:*:*:*:*:*:*

History

21 Aug 2025, 18:24

Type	Values Removed	Values Added
First Time		Tenda ac6 Tenda ac6 Firmware Tenda
CPE		cpe:2.3:o:tenda:ac6_firmware:02.03.01.110:::::::* cpe:2.3:h:tenda:ac6:5.0:::::::*
Summary		(es) Existe una vulnerabilidad de autenticación predeterminada insegura en la función de autenticación de configuración inicial de Tenda AC6 V5.0 V02.03.01.110. Una solicitud de red especialmente manipulada puede provocar la ejecución de código arbitrario. Un atacante puede acceder al dispositivo para activar esta vulnerabilidad.
References	~~() https://talosintelligence.com/vulnerability_reports/TALOS-2025-2163 -~~	() https://talosintelligence.com/vulnerability_reports/TALOS-2025-2163 - Third Party Advisory

20 Aug 2025, 14:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-08-20 14:15

Updated : 2025-08-21 18:24

NVD link : CVE-2025-24322

Mitre link : CVE-2025-24322

CVE.ORG link : CVE-2025-24322

JSON object : View

Products Affected

tenda

ac6
ac6_firmware

CWE

CWE-304

Missing Critical Step in Authentication

{"id": "CVE-2025-24322", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "talos-cna@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.2}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2025-08-20T14:15:42.263", "references": [{"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2025-2163", "tags": ["Third Party Advisory"], "source": "talos-cna@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "talos-cna@cisco.com", "description": [{"lang": "en", "value": "CWE-304"}]}], "descriptions": [{"lang": "en", "value": "An unsafe default authentication vulnerability exists in the Initial Setup Authentication functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted network request can lead to arbitrary code execution. An attacker can browse to the device to trigger this vulnerability."}, {"lang": "es", "value": "Existe una vulnerabilidad de autenticaci\u00f3n predeterminada insegura en la funci\u00f3n de autenticaci\u00f3n de configuraci\u00f3n inicial de Tenda AC6 V5.0 V02.03.01.110. Una solicitud de red especialmente manipulada puede provocar la ejecuci\u00f3n de c\u00f3digo arbitrario. Un atacante puede acceder al dispositivo para activar esta vulnerabilidad."}], "lastModified": "2025-08-21T18:24:59.110", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:tenda:ac6_firmware:02.03.01.110:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FBBF7445-03C8-48EA-9DC3-BD4825E7CC0A"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:tenda:ac6:5.0:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CFBE582F-BE50-4810-AAB2-B19F40693ACE"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "talos-cna@cisco.com"}