📦 Ac20 Firmware

by Tenda

🔍 What is Ac20 Firmware?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2025-15356

HIGH CVSS 8.8 Dec 30, 2025

A buffer overflow vulnerability in Tenda AC20 routers allows remote attackers to execute arbitrary code by sending specially crafted requests to the PowerSaveSet function. This affects all Tenda AC20 ...

CVE-2025-14656

HIGH CVSS 8.8 Dec 14, 2025

A buffer overflow vulnerability in Tenda AC20 routers allows remote attackers to execute arbitrary code by manipulating schedStartTime/schedEndTime parameters in the openSchedWifi function. This affec...

CVE-2025-14655

HIGH CVSS 8.8 Dec 14, 2025

A stack-based buffer overflow vulnerability in Tenda AC20 routers allows remote attackers to execute arbitrary code by manipulating the rebootTime parameter. This affects Tenda AC20 routers running fi...

CVE-2025-14654

HIGH CVSS 8.8 Dec 14, 2025

This vulnerability allows remote attackers to execute arbitrary code on Tenda AC20 routers via a stack-based buffer overflow in the HTTP daemon. Attackers can exploit this without authentication to po...

CVE-2025-13258

HIGH CVSS 8.8 Nov 17, 2025

A buffer overflow vulnerability in Tenda AC20 routers allows remote attackers to execute arbitrary code by manipulating the wpapsk_crypto parameter in the /goform/WifiExtraSet endpoint. This affects a...

CVE-2025-11385

HIGH CVSS 8.8 Oct 7, 2025

A buffer overflow vulnerability in Tenda AC20 routers allows remote attackers to execute arbitrary code by manipulating the timeZone parameter. This affects Tenda AC20 routers up to firmware version 1...

CVE-2025-10815

HIGH CVSS 8.8 Sep 22, 2025

A buffer overflow vulnerability in Tenda AC20 routers allows remote attackers to execute arbitrary code or cause denial of service by sending specially crafted HTTP POST requests. This affects Tenda A...

CVE-2025-9791

HIGH CVSS 8.8 Sep 1, 2025

This vulnerability allows remote attackers to execute arbitrary code on Tenda AC20 routers via a stack-based buffer overflow in the /goform/fromAdvSetMacMtuWan endpoint. Attackers can exploit this by ...

CVE-2025-9089

HIGH CVSS 8.8 Aug 17, 2025

A stack-based buffer overflow vulnerability in Tenda AC20 routers allows remote attackers to execute arbitrary code by sending specially crafted requests to the SetIpMacBind function. This affects Ten...

CVE-2025-9087

HIGH CVSS 8.8 Aug 16, 2025

This vulnerability allows remote attackers to execute arbitrary code on Tenda AC20 routers via a stack-based buffer overflow in the SetNetControlList endpoint. Attackers can exploit this without authe...

CVE-2025-8939

HIGH CVSS 8.8 Aug 14, 2025

This vulnerability allows remote attackers to execute arbitrary code on Tenda AC20 routers by exploiting a buffer overflow in the WifiGuestSet function. Attackers can send specially crafted requests t...

CVE-2025-8131

HIGH CVSS 8.8 Jul 25, 2025

This critical vulnerability in Tenda AC20 routers allows remote attackers to execute arbitrary code via a stack-based buffer overflow in the SetStaticRouteCfg functionality. Attackers can exploit this...