PT-2025-35506

Name of the Vulnerable Software and Affected Versions: Tenda AC20 version 16.03.08.05 Description: A stack-based buffer overflow exists due to the manipulation of the wanMTU argument in the file /goform/fromAdvSetMacMtuWan. Remote exploitation is possible. The exploit has been made publicly...

CVE-2025-8810

CVE-2025-8810 affects Tenda AC20 v16.03.08.05. The vulnerable component is the strcpy call in /goform/SetFirewallCfg, where manipulating the firewallEn argument causes a stack-based buffer overflow. The issue enables remote code execution with network access, matching the V3/V4 CVSS vectors and a...

Tenda AC20 安全漏洞

Tenda AC20 is a wireless router from Tenda, China. A security vulnerability exists in Tenda AC20 version 16.03.08.05, which originates from a stack buffer overflow caused by the strcpy parameter firewallEn in the function strcpy in the file /goform/SetFirewallCfg, which could lead to a remote...