A vulnerability classified as critical has been found in Tenda AC20 up to 16.03.08.12. Affected is an unknown function of the file /goform/SetSysTimeCfg of the component httpd. The manipulation of the argument timeZone leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
References
| Link | Resource |
|---|---|
| https://github.com/CH13hh/cve/blob/main/tenda1.md | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.317574 | Permissions Required VDB Entry |
| https://vuldb.com/?id.317574 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.620625 | Third Party Advisory VDB Entry |
| https://www.tenda.com.cn/ | Product |
Configurations
Configuration 1 (hide)
| AND |
|
History
05 Aug 2025, 19:21
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:tenda:ac20_firmware:16.03.08.12:*:*:*:*:*:*:* cpe:2.3:h:tenda:ac20:-:*:*:*:*:*:*:* |
|
| First Time |
Tenda ac20 Firmware
Tenda ac20 Tenda |
|
| References | () https://www.tenda.com.cn/ - Product | |
| References | () https://vuldb.com/?id.317574 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.620625 - Third Party Advisory, VDB Entry | |
| References | () https://github.com/CH13hh/cve/blob/main/tenda1.md - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.317574 - Permissions Required, VDB Entry |
25 Jul 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-07-25 15:15
Updated : 2025-08-05 19:21
NVD link : CVE-2025-8160
Mitre link : CVE-2025-8160
JSON object : View
Products Affected
tenda
- ac20_firmware
- ac20