CVE-2025-9046

The CVE refers to Tenda AC20 16.03.08.12, where the vulnerability is in sub_46A2AC of /goform/setMacFilterCfg. Manipulating the deviceList argument causes a stack-based buffer overflow, and the issue can be triggered remotely with a publicly disclosed exploit. Multiple sources confirm the affecte...

CVE-2025-9046 Tenda AC20 setMacFilterCfg sub_46A2AC stack-based overflow

A vulnerability was identified in Tenda AC20 16.03.08.12. This issue affects the function sub46A2AC of the file /goform/setMacFilterCfg. The manipulation of the argument deviceList leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the...