Approved changes feed: RSS · Atom

cpe:2.3:o:tenda:ac20_firmware:16.03.08.12:*:*:*:*:*:*:*

part: o version: 16.03.08.12 update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductAc20 Firmware (937e6db8-eec4-5e15-bb86-b4ec80b3d3c3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9091 vulnerable 2026-06-08 07:45:21.678186 db.gcve.eu details are currently unavailable. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-9090 vulnerable 2026-06-08 07:45:21.677661 db.gcve.eu details are currently unavailable. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-9089 vulnerable 2026-06-08 07:45:21.676950 Tenda AC20 SetIpMacBind sub_48E628 stack-based overflow
HIGH (8.8)
A vulnerability was determined in Tenda AC20 16.03.08.12. This issue affects the function sub_48E628 of the file /goform/SetIpMacBind. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-08-16T23:32:07.804Z
Updated: 2025-08-18T17:58:40.337Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-9088 vulnerable 2026-06-08 07:45:21.676548 Tenda AC20 formSetVirtualSer save_virtualser_data stack-based overflow
HIGH (8.8)
A vulnerability was found in Tenda AC20 16.03.08.12. This vulnerability affects the function save_virtualser_data of the file /goform/formSetVirtualSer. The manipulation of the argument list leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-08-16T23:02:07.777Z
Updated: 2025-08-18T17:59:09.706Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-9087 vulnerable 2026-06-08 07:45:21.676072 Tenda AC20 SetNetControlList Endpoint set_qosMib_list stack-based overflow
HIGH (8.8)
A vulnerability has been found in Tenda AC20 16.03.08.12. This affects the function set_qosMib_list of the file /goform/SetNetControlList of the component SetNetControlList Endpoint. The manipulation of the argument list leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-08-16T22:32:07.366Z
Updated: 2025-08-18T17:59:50.592Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-9046 vulnerable 2026-06-08 07:45:21.628745 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8160 vulnerable 2026-06-08 07:45:19.729101 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14656 vulnerable 2026-06-08 07:06:34.911914 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14655 vulnerable 2026-06-08 07:06:34.911372 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14654 vulnerable 2026-06-08 07:06:34.909781 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13258 vulnerable 2026-06-08 07:04:31.868766 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11385 vulnerable 2026-06-08 07:02:28.684078 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.