GCVE - cpe:2.3:o:tenda:ac20_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:tenda:ac20_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Tenda (`cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42`)
Product	Ac20 Firmware (`937e6db8-eec4-5e15-bb86-b4ec80b3d3c3`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-8940`	vulnerable	2026-06-08 07:45:21.479148	Tenda AC20 saveParentControlInfo strcpy buffer overflow HIGH (8.8) A vulnerability was identified in Tenda AC20 up to 16.03.08.12. Affected by this vulnerability is the function strcpy of the file /goform/saveParentControlInfo. The manipulation of the argument Time leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2025-08-14T05:32:11.901Z Updated: 2025-08-15T12:58:09.232Z Open on db.gcve.eu Reference links https://vuldb.com/?id.319903 https://vuldb.com/?ctiid.319903 https://vuldb.com/?submit.631836 https://github.com/lin-3-start/lin-cve/blob/main/Tenda%20AC20-2/Tenda%20AC20-2.md https://github.com/lin-3-start/lin-cve/blob/main/Tenda%20AC20-2/Tenda%20AC20-2.md#poc	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-8939`	vulnerable	2026-06-08 07:45:21.478472	Tenda AC20 WifiGuestSet buffer overflow HIGH (8.8) A vulnerability was determined in Tenda AC20 up to 16.03.08.12. Affected is an unknown function of the file /goform/WifiGuestSet. The manipulation of the argument shareSpeed leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2025-08-14T05:32:07.802Z Updated: 2025-08-15T12:58:16.253Z Open on db.gcve.eu Reference links https://vuldb.com/?id.319902 https://vuldb.com/?ctiid.319902 https://vuldb.com/?submit.631829 https://github.com/lin-3-start/lin-cve/blob/main/Tenda%20AC20/Tenda%20AC20.md https://github.com/lin-3-start/lin-cve/blob/main/Tenda%20AC20/Tenda%20AC20.md#3-poc	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-15356`	vulnerable	2026-06-08 07:06:36.120686	Tenda AC20 PowerSaveSet sscanf buffer overflow HIGH (8.8) A vulnerability has been found in Tenda AC20 up to 16.03.08.12. The impacted element is the function sscanf of the file /goform/PowerSaveSet. The manipulation of the argument powerSavingEn/time/powerSaveDelay/ledCloseType leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2025-12-30T20:32:08.560Z Updated: 2026-02-24T06:19:20.131Z Open on db.gcve.eu Reference links https://vuldb.com/?id.338742 https://vuldb.com/?ctiid.338742 https://vuldb.com/?submit.726360 https://github.com/xyh4ck/iot_poc/tree/main/Tenda%20AC20_Buffer_Overflow https://github.com/xyh4ck/iot_poc/blob/main/Tenda%20AC20_Buffer_Overflow/Tenda%20AC20_Buffer_Overflow.md#poc	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-14656`	vulnerable	2026-06-08 07:06:34.911770	Tenda AC20 openSchedWifi httpd buffer overflow HIGH (8.8) A weakness has been identified in Tenda AC20 16.03.08.12. This affects the function httpd of the file /goform/openSchedWifi. Executing a manipulation of the argument schedStartTime/schedEndTime can lead to buffer overflow. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. Published: 2025-12-14T11:02:07.310Z Updated: 2026-02-24T05:50:18.678Z Open on db.gcve.eu Reference links https://vuldb.com/?id.336389 https://vuldb.com/?ctiid.336389 https://vuldb.com/?submit.712917 https://github.com/Madgeaaaaa/MY_VULN_2/blob/main/Tenda/VULN14/AC20_openSchedWifi.md https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-14655`	vulnerable	2026-06-08 07:06:34.911231	Tenda AC20 httpd SetSysAutoRebbotCfg formSetRebootTimer stack-based overflow HIGH (8.8) A security flaw has been discovered in Tenda AC20 16.03.08.12. The impacted element is the function formSetRebootTimer of the file /goform/SetSysAutoRebbotCfg of the component httpd. Performing a manipulation of the argument rebootTime results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. Published: 2025-12-14T10:32:08.489Z Updated: 2026-02-24T05:50:00.913Z Open on db.gcve.eu Reference links https://vuldb.com/?id.336388 https://vuldb.com/?ctiid.336388 https://vuldb.com/?submit.712910 https://github.com/Madgeaaaaa/MY_VULN_2/blob/main/Tenda/VULN13/AC20_SetSysAutoRebbotCfg.md https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-14654`	vulnerable	2026-06-08 07:06:34.908604	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-13258`	vulnerable	2026-06-08 07:04:31.867371	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-11385`	vulnerable	2026-06-08 07:02:28.682187	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-10815`	vulnerable	2026-06-08 07:02:27.553718	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-10120`	vulnerable	2026-06-08 07:02:26.332061	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.