PT-2025-51159 · Tenda · Tenda Ac20

Jiahui2888

·

Published

2025-12-14

·

Updated

2025-12-19

·

CVE-2025-14655

CVSS v2.0
9.0
VectorAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Tenda AC20 version 16.03.08.12
Description A security flaw exists in Tenda AC20 version 16.03.08.12. The issue resides in the 
formSetRebootTimer
function within the 
/goform/SetSysAutoRebbotCfg
file of the 
httpd
component. Manipulation of the 
rebootTime
argument can lead to a stack-based buffer overflow. This allows for remote exploitation. A public exploit is available.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-787CWE-121CWE-119

Related Identifiers

CVE-2025-14655

Affected Products

Tenda Ac20