What is CVE-2025-70252?

CVE-2025-70252 is a high-severity vulnerability in Tenda Ac6, classified under Stack-based Buffer Overflow. CVSS score: 7.5/10. Published 2026-03-02.

How severe is CVE-2025-70252?

High severity. CVSS v3 base score is 7.5 out of 10.

Buffer overflow in Tenda Ac6

CVE-2025-70252

An issue was discovered in /goform/WifiWpsStart in Tenda AC6V2.0 V15.03.06.23_multi. The index and mode are controllable. If the conditions are met to sprintf, they will be spliced into tmp. It is worth noting that there is no size check,which leads to a stack overflow vulnerability.

Vulnerability class: Buffer Overflow

EPSS: 0.004 (36.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Tenda Ac6 — versions 2.0
Tenda Ac6_firmware — versions 15.03.06.23_multi
N/a — versions n/a

Weakness classification (CWE)

CWE-121 — Stack-based Buffer Overflow

References

cve@mitre.org (Product)
cve@mitre.org (Exploit, Third Party Advisory)

Frequently asked questions

What is CVE-2025-70252?: CVE-2025-70252 is a high-severity vulnerability in Tenda Ac6, classified under Stack-based Buffer Overflow. CVSS score: 7.5/10. Published 2026-03-02.
How severe is CVE-2025-70252?: High severity. CVSS v3 base score is 7.5 out of 10.