VULNERABILITY INTELLIGENCE

CVE-2025-70252

CVSS score7.5 HIGH
EPSS probability0.50%
CISA KEVNot currently listed
Published2026-03-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

An issue was discovered in /goform/WifiWpsStart in Tenda AC6V2.0 V15.03.06.23_multi. The index and mode are controllable. If the conditions are met to sprintf, they will be spliced into tmp. It is worth noting that there is no size check,which leads to a stack overflow vulnerability.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-121

Primary references