CVE-2025-15356

🗓️ 30 Dec 2025 20:32:08Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 6 Views🌐 WEB

CVE-2025-15356 affects Tenda AC20; remote buffer overflow via sscanf in /goform/PowerSaveSet.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2025-15356	30 Dec 202509:05	–	circl
CNNVD	Tenda AC20 安全漏洞	30 Dec 202500:00	–	cnnvd
Cvelist	CVE-2025-15356 Tenda AC20 PowerSaveSet sscanf buffer overflow	30 Dec 202520:32	–	cvelist
EUVD	EUVD-2025-205852	30 Dec 202520:32	–	euvd
NVD	CVE-2025-15356	30 Dec 202521:15	–	nvd
OSV	CVE-2025-15356	30 Dec 202521:15	–	osv
Positive Technologies	PT-2025-54177	30 Dec 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-15356	31 Dec 202521:09	–	redhatcve
Vulnrichment	CVE-2025-15356 Tenda AC20 PowerSaveSet sscanf buffer overflow	30 Dec 202520:32	–	vulnrichment

NVD

Vulners

Node

tenda ac20_firmwareRange≤16.03.08.12

AND

tenda ac20Match-

[
  {
    "vendor": "Tenda",
    "product": "AC20",
    "versions": [
      {
        "version": "16.03.08.0",
        "status": "affected"
      },
      {
        "version": "16.03.08.1",
        "status": "affected"
      },
      {
        "version": "16.03.08.2",
        "status": "affected"
      },
      {
        "version": "16.03.08.3",
        "status": "affected"
      },
      {
        "version": "16.03.08.4",
        "status": "affected"
      },
      {
        "version": "16.03.08.5",
        "status": "affected"
      },
      {
        "version": "16.03.08.6",
        "status": "affected"
      },
      {
        "version": "16.03.08.7",
        "status": "affected"
      },
      {
        "version": "16.03.08.8",
        "status": "affected"
      },
      {
        "version": "16.03.08.9",
        "status": "affected"
      },
      {
        "version": "16.03.08.10",
        "status": "affected"
      },
      {
        "version": "16.03.08.11",
        "status": "affected"
      },
      {
        "version": "16.03.08.12",
        "status": "affected"
      }
    ],
    "cpes": [
      "cpe:2.3:o:tenda:ac20_firmware:*:*:*:*:*:*:*:*"
    ]
  }
]

Source	Link
tenda	www.tenda.com.cn/
github	www.github.com/xyh4ck/iot_poc/tree/main/Tenda%20AC20_Buffer_Overflow
vuldb	www.vuldb.com/
github	www.github.com/xyh4ck/iot_poc/blob/main/Tenda%20AC20_Buffer_Overflow/Tenda%20AC20_Buffer_Overflow.md
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
powerSavingEn	request body	/goform/PowerSaveSet	Buffer overflow via improper handling of input arguments in PowerSaveSet allowing remote exploit.	CWE-119, CWE-120
time	request body	/goform/PowerSaveSet	Buffer overflow via improper handling of input arguments in PowerSaveSet allowing remote exploit.	CWE-119, CWE-120
powerSaveDelay	request body	/goform/PowerSaveSet	Buffer overflow via improper handling of input arguments in PowerSaveSet allowing remote exploit.	CWE-119, CWE-120
ledCloseType	request body	/goform/PowerSaveSet	Buffer overflow via improper handling of input arguments in PowerSaveSet allowing remote exploit.	CWE-119, CWE-120

24 Feb 2026 06:19Current

7High risk

Vulners AI Score7

CVSS 48.7

CVSS 3.18.8

CVSS 29

CVSS 38.8

EPSS0.00344

SSVC