PT-2025-51160 · Tenda · Tenda Ac20

Jiahui2888

·

Published

2025-12-14

·

Updated

2025-12-19

·

CVE-2025-14656

CVSS v2.0
9.0
VectorAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Tenda AC20 version 16.03.08.12
Description A flaw exists in the Tenda AC20 device. Manipulation of the 
schedStartTime
/
schedEndTime
arguments within the 
httpd
function of the 
/goform/openSchedWifi
file can lead to a buffer overflow. This issue can be exploited remotely. A public exploit is available.
Recommendations Versions prior to 16.03.08.12 are potentially affected. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-120CWE-119

Related Identifiers

CVE-2025-14656

Affected Products

Tenda Ac20