Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

AC20 — Vulnerabilities & Security Advisories 20

All 20 CVE vulnerabilities found in AC20, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities for the AC20 product, categorized by weakness type and associated tags from the vendor. It serves as a centralized resource for tracking security flaws affecting this specific hardware or software solution, providing a structured overview of its exposure landscape. The content on this page collects a comprehensive range of vulnerability reports, including those rated as critical, high, medium, and low severity. These entries cover a wide variety of vulnerability classes, such as cross-site scripting, SQL injection, remote code execution, and privilege escalation flaws, among others. The data presented spans from the initial release of the AC20 product up to the most recent disclosures, ensuring that both legacy issues and current threats are accounted for within a consistent timeline. This historical perspective allows for a thorough examination of how the product’s security posture has evolved over time. Visitors to this page can discover valuable insights into the security maturity of the AC20 product. Users are able to track the vendor’s security advisories to stay updated on patches and mitigation strategies. Additionally, one can gain a deeper understanding of common weakness classes by analyzing specific instances within this product’s context. The page also facilitates looking up the complete vulnerability history of the AC20, helping organizations assess risk and prioritize remediation efforts based on historical trends and severity levels.

Vendor: Tenda

CVE ID Title CVSS Severity Published
CVE-2025-15356 Tenda AC20 PowerSaveSet sscanf buffer overflow CWE-120 8.8 High 2025-12-30
CVE-2025-14656 Tenda AC20 openSchedWifi httpd buffer overflow CWE-120 8.8 High 2025-12-14
CVE-2025-14655 Tenda AC20 httpd SetSysAutoRebbotCfg formSetRebootTimer stack-based overflow CWE-121 8.8 High 2025-12-14
CVE-2025-14654 Tenda AC20 httpd setPptpUserList formSetPPTPUserList stack-based overflow CWE-121 8.8 High 2025-12-14
CVE-2025-13258 Tenda AC20 WifiExtraSet buffer overflow CWE-120 8.8 High 2025-11-17
CVE-2025-11385 Tenda AC20 fast_setting_wifi_set sscanf buffer overflow CWE-120 8.8 High 2025-10-07
CVE-2025-10815 Tenda AC20 HTTP POST Request SetPptpServerCfg strcpy buffer overflow CWE-120 8.8 High 2025-09-22
CVE-2025-10120 Tenda AC20 GetParentControlInfo strcpy buffer overflow CWE-120 8.8 High 2025-09-09
CVE-2025-9791 Tenda AC20 fromAdvSetMacMtuWan stack-based overflow CWE-121 8.8 High 2025-09-01
CVE-2025-9091 Tenda AC20 shadow hard-coded credentials CWE-798 2.5 Low 2025-08-17
CVE-2025-9090 Tenda AC20 Telnet Service telnet websFormDefine command injection CWE-77 6.3 Medium 2025-08-17
CVE-2025-9089 Tenda AC20 SetIpMacBind sub_48E628 stack-based overflow CWE-121 8.8 High 2025-08-16
CVE-2025-9088 Tenda AC20 formSetVirtualSer save_virtualser_data stack-based overflow CWE-121 8.8 High 2025-08-16
CVE-2025-9087 Tenda AC20 SetNetControlList Endpoint set_qosMib_list stack-based overflow CWE-121 8.8 High 2025-08-16
CVE-2025-9046 Tenda AC20 setMacFilterCfg sub_46A2AC stack-based overflow CWE-121 8.8 High 2025-08-15
CVE-2025-8940 Tenda AC20 saveParentControlInfo strcpy buffer overflow CWE-120 8.8 High 2025-08-14
CVE-2025-8939 Tenda AC20 WifiGuestSet buffer overflow CWE-120 8.8 High 2025-08-14
CVE-2025-8810 Tenda AC20 SetFirewallCfg strcpy stack-based overflow CWE-121 8.8 High 2025-08-10
CVE-2025-8160 Tenda AC20 httpd SetSysTimeCfg buffer overflow CWE-120 8.8 High 2025-07-25
CVE-2025-8131 Tenda AC20 SetStaticRouteCfg stack-based overflow CWE-121 8.8 High 2025-07-25

All 20 known CVE vulnerabilities affecting AC20 with full Chinese analysis, references, and POCs where available.