Vulnerabilities (CVE)

Filtered by vendor Tenda Subscribe
Filtered by product Ac20 Firmware
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-8131 1 Tenda 2 Ac20, Ac20 Firmware 2025-08-05 9.0 HIGH 8.8 HIGH
A vulnerability was found in Tenda AC20 16.03.08.05. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /goform/SetStaticRouteCfg. The manipulation of the argument list leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVE-2025-8160 1 Tenda 2 Ac20, Ac20 Firmware 2025-08-05 9.0 HIGH 8.8 HIGH
A vulnerability classified as critical has been found in Tenda AC20 up to 16.03.08.12. Affected is an unknown function of the file /goform/SetSysTimeCfg of the component httpd. The manipulation of the argument timeZone leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.