Security Advisory

CVE-2025-5852

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-06-09 00:00:18
Last updated 2025-06-09 03:05:34
Assigner VulDB
State PUBLISHED

Description

A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16. Affected is the function formSetPPTPUserList of the file /goform/setPptpUserList. The manipulation of the argument list leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.