ac20_firmware vulnerabilities
CVEs whose affected-version data names the ac20_firmware package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
6 CVEsRSS
CVE-2025-14656High· 8.8A weakness has been identified in Tenda AC20 16.03.08.12
A weakness has been identified in Tenda AC20 16.03.08.12. This affects the function httpd of the file /goform/openSchedWifi. Executing a manipulation of the argument schedStartTime/schedEndTime can lead to buffer overflow. The attack may…
CVE-2025-14654High· 8.8A vulnerability was identified in Tenda AC20 16.03.08.12
A vulnerability was identified in Tenda AC20 16.03.08.12. The affected element is the function formSetPPTPUserList of the file /goform/setPptpUserList of the component httpd. Such manipulation of the argument list leads to stack-based bu…
CVE-2025-14655High· 8.8A security flaw has been discovered in Tenda AC20 16.03.08.12
A security flaw has been discovered in Tenda AC20 16.03.08.12. The impacted element is the function formSetRebootTimer of the file /goform/SetSysAutoRebbotCfg of the component httpd. Performing a manipulation of the argument rebootTime r…
CVE-2025-11385High· 8.8A vulnerability has been found in Tenda AC20 up to 16.03.08.12
A vulnerability has been found in Tenda AC20 up to 16.03.08.12. The affected element is the function sscanf of the file /goform/fast_setting_wifi_set. The manipulation of the argument timeZone leads to buffer overflow. The attack can be …
CVE-2025-10815High· 8.8A vulnerability was identified in Tenda AC20 up to 16.03.08.12
A vulnerability was identified in Tenda AC20 up to 16.03.08.12. Affected by this issue is the function strcpy of the file /goform/SetPptpServerCfg of the component HTTP POST Request Handler. Such manipulation of the argument startIp lead…
CVE-2025-9791High· 8.8A weakness has been identified in Tenda AC20 16.03.08.05
A weakness has been identified in Tenda AC20 16.03.08.05. This vulnerability affects unknown code of the file /goform/fromAdvSetMacMtuWan. This manipulation of the argument wanMTU causes stack-based buffer overflow. Remote exploitation o…