PT-2025-36541 · Tenda · Tenda Ac20

Cymiao

·

CVE-2025-10120

·

Publicado

2025-09-08

·

Atualizado

2025-09-14

CVSS v2.0

9.0

Alta

VetorAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Tenda AC20 versions up to 16.03.08.12
Description: A buffer overflow exists in the web UI of Tenda AC20. The issue is located in the strcpy function within the /goform/GetParentControlInfo file. Manipulation of the mac argument can trigger the overflow, potentially allowing for remote code execution. The exploit is publicly available.
Recommendations: Tenda AC20 versions prior to 16.03.08.12: Update to a newer version. As a temporary workaround, consider restricting access to the /goform/GetParentControlInfo file.

Exploit

Correção

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119CWE-120

Identificadores relacionados

BDU:2025-12677
CVE-2025-10120

Produtos afetados

Tenda Ac20