CVE-2025-31355

CRITICO 9.8CVE-2025-31355 · Published 20/08/2025 · updated 17/06/2026

In breve

CVE-2025-31355 è una vulnerabilità CRITICO (CVSS 9.8).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.30%, superiore al 22.8% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A firmware update vulnerability exists in the Firmware Signature Validation functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted malicious file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

References

talosintelligence.com/vulnerability_reports/TALOS-2025-2161 · Third Party Advisory
talosintelligence.com/vulnerability_reports/TALOS-2025-2161

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free