CVE-2025-8160

🗓️ 25 Jul 2025 15:02:07Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 46 Views🌐 WEB

Critical buffer overflow vulnerability in Tenda AC20 allows remote exploitation via httpd component.

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	Tenda AC20 Router Buffer Overflow	12 Sep 202500:00	–	bdu_fstec
Circl	CVE-2025-8160	25 Jul 202515:19	–	circl
CNNVD	Tenda AC20 安全漏洞	25 Jul 202500:00	–	cnnvd
CNVD	Tenda AC20 Buffer Overflow Vulnerability	28 Jul 202500:00	–	cnvd
Cvelist	CVE-2025-8160 Tenda AC20 httpd SetSysTimeCfg buffer overflow	25 Jul 202515:02	–	cvelist
EUVD	EUVD-2025-22705	3 Oct 202520:07	–	euvd
NVD	CVE-2025-8160	25 Jul 202515:15	–	nvd
osv_cve	CVE-2025-8160	25 Jul 202515:15	–	osv_cve
Positive Technologies	PT-2025-30850 · Tenda · Tenda Ac20	25 Jul 202500:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2025-8160: Buffer Copy without Checking Size of Input	25 Jul 202500:00	–	rapid7

NVD

Vulners

Node

AND

tenda ac20_firmwareMatch16.03.08.12

tenda ac20Match-

[
  {
    "vendor": "Tenda",
    "product": "AC20",
    "versions": [
      {
        "version": "16.03.08.0",
        "status": "affected"
      },
      {
        "version": "16.03.08.1",
        "status": "affected"
      },
      {
        "version": "16.03.08.2",
        "status": "affected"
      },
      {
        "version": "16.03.08.3",
        "status": "affected"
      },
      {
        "version": "16.03.08.4",
        "status": "affected"
      },
      {
        "version": "16.03.08.5",
        "status": "affected"
      },
      {
        "version": "16.03.08.6",
        "status": "affected"
      },
      {
        "version": "16.03.08.7",
        "status": "affected"
      },
      {
        "version": "16.03.08.8",
        "status": "affected"
      },
      {
        "version": "16.03.08.9",
        "status": "affected"
      },
      {
        "version": "16.03.08.10",
        "status": "affected"
      },
      {
        "version": "16.03.08.11",
        "status": "affected"
      },
      {
        "version": "16.03.08.12",
        "status": "affected"
      }
    ],
    "modules": [
      "httpd"
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
tenda	www.tenda.com.cn/
vuldb	www.vuldb.com/
github	www.github.com/CH13hh/cve/blob/main/tenda1.md
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
timeZone	request body	/goform/SetSysTimeCfg	Buffer overflow in timeZone parameter of /goform/SetSysTimeCfg on Tenda AC20, enabling remote exploitation.	CWE-119, CWE-120

17 Jun 2026 10:06Current

8High risk

Vulners AI Score8

CVSS 48.7

CVSS 3.18.8

CVSS 38.8

CVSS 29

EPSS0.01461

SSVC