First day on Intigriti: our agent harness found and proved a remote code execution bug, paid €3,000.

CVE-2025-29031

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the fromAddressNat function.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/WhereisDoujo/CVE/issues/5Exploit, Issue Tracking, Third Party Advisory

Timeline

Published: Mar 14, 2025
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2025

CVE-2025-290325.9Tenda AC9 v15.03.05.19(6318) was discovered to contain a buffer overflow via the formWifiWpsOOB function.CVE-2025-290337.3An issue in BambooHR Build v.25.0210.170831-83b08dd allows a remote attacker to escalate privileges via the /saml/index.php?r=" HTTP GET par CVE-2025-290365.9An issue in hackathon-starter v.8.1.0 allows a remote attacker to escalate privileges via the user.js component.CVE-2025-290397.2An issue in dlink DIR 832x 240802 allows a remote attacker to execute arbitrary code via the function 0x41dda8 CVE-2025-290409.8An issue in dlink DIR 823x 240802 allows a remote attacker to execute arbitrary code via the target_addr key value and the function 0x41737c CVE-2025-290419.8An issue in dlink DIR 823x 240802 allows a remote attacker to execute arbitrary code via the target_addr key value and the function 0x41710c CVE-2025-290429.8An issue in dlink DIR 832x 240802 allows a remote attacker to execute arbitrary code via the macaddr key value to the function 0x42232c CVE-2025-290439.8An issue in dlink DIR 832x 240802 allows a remote attacker to execute arbitrary code via the function 0x417234 CVE-2025-290449.8Buffer Overflow vulnerability in Netgear- R61 router V1.0.1.28 allows a remote attacker to execute arbitrary code via the QUERY_STRING key v CVE-2025-290459.8Buffer Overflow vulnerability in ALFA_CAMPRO-co-2.29 allows a remote attacker to execute arbitrary code via the newap_text_0 key value CVE-2025-290469.8Buffer Overflow vulnerability inALFA WiFi CampPro router ALFA_CAMPRO-co-2.29 allows a remote attacker to execute arbitrary code via the GAPS CVE-2025-290479.8Buffer Overflow vulnerability inALFA WiFi CampPro router ALFA_CAMPRO-co-2.29 allows a remote attacker to execute arbitrary code via the hidd

CVE-2025-29031: Critical severity, CVSS 9.8 | Vulnix