CVE-2025-11385
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk55th percentile - higher than 55% of all known CVEs
Summary
A buffer overflow vulnerability exists in Tenda AC20 up to version 16.03.08.12 in the sscanf function of /goform/fast_setting_wifi_set. Manipulation of the timeZone argument allows remote attacks, and the exploit has been publicly disclosed.
Risk Assessment
A remote attacker can exploit the buffer overflow to execute code or destabilize the device. The public availability of the exploit increases the risk.
Recommendation
Update the Tenda AC20 firmware to the latest version or restrict access to the management interface. Monitor the vendor for patches.
Other vulnerabilities in Tenda AC20
See all- CVE-2025-14654High
A vulnerability was identified in Tenda AC20 16.03.08.12. The affected element is the function formSetPPTPUserList of the file /goform/setPptpUserList of the component httpd. Manipulation of the argument list leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used.
- CVE-2025-9791High
A weakness has been identified in Tenda AC20 16.03.08.05. This vulnerability affects unknown code of the file /goform/fromAdvSetMacMtuWan. Manipulation of the wanMTU argument causes a stack-based buffer overflow. Remote exploitation is possible and the exploit has been made public.
Original NVD description (English source)
A vulnerability has been found in Tenda AC20 up to 16.03.08.12. The affected element is the function sscanf of the file /goform/fast_setting_wifi_set. The manipulation of the argument timeZone leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS