The vulnerability of the `save_virtualser_data` function in the `/goform/formSetVirtualSer` file of the Tenda AC20 router’s microprogramming system allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the savevirtualserdata function in the /goform/formSetVirtualSer file of the Tenda AC20 router’s microprogramming system is related to reading data beyond the buffer boundaries in memory when processing the list parameter. Exploiting this vulnerability allows an attacker to...

Tenda AC20 Buffer Overflow Vulnerability (CNVD-2025-19579)

The Tenda AC20 is a wireless router from the Chinese company Tenda. The Tenda AC20 suffers from a buffer overflow vulnerability that originates from the failure of the savevirtualserdata function parameter list in the /goform/formSetVirtualSer file to correctly validate the length of the input...

CVE-2025-9088

A vulnerability was found in Tenda AC20 16.03.08.12. This vulnerability affects the function savevirtualserdata of the file /goform/formSetVirtualSer. The manipulation of the argument list leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed t...