CVE-2025-9791
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk57th percentile - higher than 57% of all known CVEs
Summary
A weakness has been identified in Tenda AC20 16.03.08.05. This vulnerability affects unknown code of the file /goform/fromAdvSetMacMtuWan. Manipulation of the wanMTU argument causes a stack-based buffer overflow. Remote exploitation is possible and the exploit has been made public.
Risk Assessment
A remote attacker can use the publicly available exploit to trigger a stack overflow, potentially leading to arbitrary code execution or device crash.
Recommendation
Update Tenda AC20 firmware to the latest version if available. Otherwise, restrict management interface access from untrusted networks.
Other vulnerabilities in Tenda AC20
See all- CVE-2025-14654High
A vulnerability was identified in Tenda AC20 16.03.08.12. The affected element is the function formSetPPTPUserList of the file /goform/setPptpUserList of the component httpd. Manipulation of the argument list leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used.
- CVE-2025-11385High
A buffer overflow vulnerability exists in Tenda AC20 up to version 16.03.08.12 in the sscanf function of /goform/fast_setting_wifi_set. Manipulation of the timeZone argument allows remote attacks, and the exploit has been publicly disclosed.
Original NVD description (English source)
A weakness has been identified in Tenda AC20 16.03.08.05. This vulnerability affects unknown code of the file /goform/fromAdvSetMacMtuWan. This manipulation of the argument wanMTU causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS