CVE-2025-14655

🗓️ 14 Dec 2025 10:32:08Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 11 Views🌐 WEB

Tenda AC20 httpd formSetRebootTimer stack overflow via rebootTime; remote exploit released.

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2025-14655	14 Dec 202510:32	–	attackerkb
CNNVD	Tenda AC20 缓冲区错误漏洞	14 Dec 202500:00	–	cnnvd
CNVD	Tenda AC20 Stack Buffer Overflow Vulnerability (CNVD-2026-00674)	15 Aug 202500:00	–	cnvd
Cvelist	CVE-2025-14655 Tenda AC20 httpd SetSysAutoRebbotCfg formSetRebootTimer stack-based overflow	14 Dec 202510:32	–	cvelist
EUVD	EUVD-2025-203294	14 Dec 202512:32	–	euvd
NVD	CVE-2025-14655	14 Dec 202511:15	–	nvd
OSV	CVE-2025-14655	14 Dec 202511:15	–	osv
Positive Technologies	PT-2025-51159	14 Dec 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-14655	15 Dec 202511:33	–	redhatcve
Vulnrichment	CVE-2025-14655 Tenda AC20 httpd SetSysAutoRebbotCfg formSetRebootTimer stack-based overflow	14 Dec 202510:32	–	vulnrichment

NVD

Vulners

Node

tenda ac20_firmwareMatch16.03.08.12

AND

tenda ac20Match-

[
  {
    "vendor": "Tenda",
    "product": "AC20",
    "versions": [
      {
        "version": "16.03.08.12",
        "status": "affected"
      }
    ],
    "cpes": [
      "cpe:2.3:o:tenda:ac20_firmware:*:*:*:*:*:*:*:*"
    ],
    "modules": [
      "httpd"
    ]
  }
]

Source	Link
github	www.github.com/Madgeaaaaa/MY_VULN_2/blob/main/Tenda/VULN13/AC20_SetSysAutoRebbotCfg.md
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
tenda	www.tenda.com.cn/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
rebootTime	request body	goform/SetSysAutoRebbotCfg	Remote stack-based buffer overflow in SetSysAutoRebbotCfg via rebootTime parameter.	CWE-119, CWE-787, CWE-121

17 Jun 2026 08:36Current

8.7High risk

Vulners AI Score8.7

CVSS 48.7

CVSS 3.18.8

CVSS 29

CVSS 38.8

EPSS0.02862

SSVC

Tenda AC20 httpd SetSysAutoRebbotCfg formSetRebootTimer rebootTime overflow remote exploit