Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-31355

Опубликовано: 20 авг. 2025
Источник: nvd
CVSS3: 7.2
CVSS3: 9.8
EPSS Низкий

Описание

A firmware update vulnerability exists in the Firmware Signature Validation functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted malicious file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:tenda:ac6_firmware:02.03.01.110:*:*:*:*:*:*:*
cpe:2.3:h:tenda:ac6:5.0:*:*:*:*:*:*:*

EPSS

Процентиль: 12%
0.00041
Низкий

7.2 High

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-494

Связанные уязвимости

CVSS3: 7.2
github
6 месяцев назад

A firmware update vulnerability exists in the Firmware Signature Validation functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted malicious file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

EPSS

Процентиль: 12%
0.00041
Низкий

7.2 High

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-494