CVE-2025-14654
HighCVSS 8.8Exploitation Probability (EPSS)
High risk88th percentile - higher than 88% of all known CVEs
Summary
A vulnerability was identified in Tenda AC20 16.03.08.12. The affected element is the function formSetPPTPUserList of the file /goform/setPptpUserList of the component httpd. Manipulation of the argument list leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used.
Risk Assessment
The risk for the organization is remote buffer overflow, which could lead to arbitrary code execution or device crash. Public exploit increases the likelihood of exploitation.
Recommendation
It is recommended to immediately update the device to a newer version if available, or restrict access to the administrative panel. Monitor vendor communications.
Other vulnerabilities in Tenda AC20
See all- CVE-2025-11385High
A buffer overflow vulnerability exists in Tenda AC20 up to version 16.03.08.12 in the sscanf function of /goform/fast_setting_wifi_set. Manipulation of the timeZone argument allows remote attacks, and the exploit has been publicly disclosed.
- CVE-2025-9791High
A weakness has been identified in Tenda AC20 16.03.08.05. This vulnerability affects unknown code of the file /goform/fromAdvSetMacMtuWan. Manipulation of the wanMTU argument causes a stack-based buffer overflow. Remote exploitation is possible and the exploit has been made public.
Original NVD description (English source)
A vulnerability was identified in Tenda AC20 16.03.08.12. The affected element is the function formSetPPTPUserList of the file /goform/setPptpUserList of the component httpd. Such manipulation of the argument list leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS