CVE-2025-8160

🗓️ 25 Jul 2025 15:02:07Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 20 Views🌐 WEB

Critical buffer overflow vulnerability in Tenda AC20 allows remote exploitation via httpd component.

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of the Tenda AC20 router’s microprogramming software, related to the execution of operations outside the buffer in memory, allows a hacker to execute any command or cause a service failure.	12 Sep 202500:00	–	bdu_fstec
Circl	CVE-2025-8160	25 Jul 202515:19	–	circl
CNNVD	Tenda AC20 安全漏洞	25 Jul 202500:00	–	cnnvd
CNVD	Tenda AC20 Buffer Overflow Vulnerability	28 Jul 202500:00	–	cnvd
Cvelist	CVE-2025-8160 Tenda AC20 httpd SetSysTimeCfg buffer overflow	25 Jul 202515:02	–	cvelist
EUVD	EUVD-2025-22705	3 Oct 202520:07	–	euvd
NVD	CVE-2025-8160	25 Jul 202515:15	–	nvd
OSV	CVE-2025-8160	25 Jul 202515:15	–	osv
Positive Technologies	PT-2025-30850 · Tenda · Tenda Ac20	25 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-8160	27 Jul 202515:27	–	redhatcve

NVD

Vulners

Node

tenda ac20_firmwareMatch16.03.08.12

AND

tenda ac20Match-

[
  {
    "vendor": "Tenda",
    "product": "AC20",
    "versions": [
      {
        "version": "16.03.08.0",
        "status": "affected"
      },
      {
        "version": "16.03.08.1",
        "status": "affected"
      },
      {
        "version": "16.03.08.2",
        "status": "affected"
      },
      {
        "version": "16.03.08.3",
        "status": "affected"
      },
      {
        "version": "16.03.08.4",
        "status": "affected"
      },
      {
        "version": "16.03.08.5",
        "status": "affected"
      },
      {
        "version": "16.03.08.6",
        "status": "affected"
      },
      {
        "version": "16.03.08.7",
        "status": "affected"
      },
      {
        "version": "16.03.08.8",
        "status": "affected"
      },
      {
        "version": "16.03.08.9",
        "status": "affected"
      },
      {
        "version": "16.03.08.10",
        "status": "affected"
      },
      {
        "version": "16.03.08.11",
        "status": "affected"
      },
      {
        "version": "16.03.08.12",
        "status": "affected"
      }
    ],
    "modules": [
      "httpd"
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
tenda	www.tenda.com.cn/
github	www.github.com/CH13hh/cve/blob/main/tenda1.md
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
timeZone	request body	/goform/SetSysTimeCfg	Buffer overflow in SetSysTimeCfg via timeZone parameter enabling remote exploitation.	CWE-119, CWE-120

17 Jun 2026 10:06Current

8.9High risk

Vulners AI Score8.9

CVSS 48.7

CVSS 3.18.8

CVSS 29

CVSS 38.8

EPSS0.01245

SSVC