CVE-2025-13258

Name of the Vulnerable Software and Affected Versions Tenda AC20 versions up to 16.03.08.12

Description A buffer overflow exists in the Tenda AC20 router. The issue is located in an unknown function within the /goform/WifiExtraSet file. Manipulation of the wpapsk crypto argument can trigger the overflow, allowing for remote code execution. The exploit for this issue is publicly available.

Recommendations Versions up to 16.03.08.12 should be updated to a newer, secure version as soon as possible. As a temporary workaround, restrict access to the /goform/WifiExtraSet endpoint to minimize the risk of exploitation.