Tenda AC8 fromSetSysTime DoS

The vulnerability of the fromSetSysTime function in the /goform/SetSysTimeCfg microprogramming system for Tenda AC8 routers is related to the issue where the operation’s output goes beyond the buffer in memory when processing the timeType parameter. Exploiting this vulnerability could allow an...

CVE-2025-5798

A vulnerability was found in Tenda AC8 16.03.34.09. It has been classified as critical. Affected is the function fromSetSysTime of the file /goform/SetSysTimeCfg. The manipulation of the argument timeType leads to stack-based buffer overflow. It is possible to launch the attack remotely. The...