← CVE Tracker
8.8HIGH
CVE-2025-9791 — A weakness has been identified in Tenda AC20 16.03.08.05.
Tenda · Ac20 Firmware · Published 1 Sept 2025 · Modified 26 Sept 2026
Description
A weakness has been identified in Tenda AC20 16.03.08.05. This vulnerability affects unknown code of the file /goform/fromAdvSetMacMtuWan. This manipulation of the argument wanMTU causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited.
References
- https://github.com/Cpppq43/Tenda/blob/main/Tenda_AC20_V16.03.08.05.md
- https://github.com/Cpppq43/Tenda/blob/main/Tenda_AC20_V16.03.08.05.md#poc
- https://vuldb.com/?ctiid.322106
- https://vuldb.com/?id.322106
- https://vuldb.com/?submit.641088
- https://www.tenda.com.cn/
- https://github.com/Cpppq43/Tenda/blob/main/Tenda_AC20_V16.03.08.05.md
- https://github.com/Cpppq43/Tenda/blob/main/Tenda_AC20_V16.03.08.05.md#poc
What to do
- Check whether Ac20 Firmware is in your asset inventory.
- Patch in the next maintenance window; prioritise internet-facing systems.
- Record the decision in your risk register for audit evidence.
Share
Link: adminadda.com/cve/CVE-2025-9791