Description

A vulnerability has been found in Tenda AC20 up to 16.03.08.12. The impacted element is the function sscanf of the file /goform/PowerSaveSet. The manipulation of the argument powerSavingEn/time/powerSaveDelay/ledCloseType leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Related CPE's

o

tenda

ac20_firmware

Vulnerable

h

tenda

ac20

-

References

https://github.com/xyh4ck/iot_poc/blob/main/Tenda%20AC20_Buffer_Overflow/Tenda%20AC20_Buffer_Overflow.md#poc

ExploitThird Party Advisory

https://github.com/xyh4ck/iot_poc/tree/main/Tenda%20AC20_Buffer_Overflow

ExploitThird Party Advisory

https://vuldb.com/?ctiid.338742

Permissions RequiredVDB Entry

https://vuldb.com/?id.338742

Third Party AdvisoryVDB Entry

https://vuldb.com/?submit.726360

Third Party AdvisoryVDB Entry

https://www.tenda.com.cn/

Product

Weaknesses

[email protected]

Primary
CWE-119CWE-120

[email protected]

Primary
CWE-120

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.8 · High

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2025-12-30T20:15:43.477Z

3 weeks ago

Last modified

2025-12-31T21:09:38.350Z

3 weeks ago