CVE-2025-8940 | Tenda AC20 up to 16.03.08.12 saveParentControlInfo strcpy Time buffer overflow

August 13, 2025 Yanac

A vulnerability was found in Tenda AC20 up to 16.03.08.12. It has been declared as critical. Affected by this vulnerability is the function strcpy of the file /goform/saveParentControlInfo. The manipulation of the argument Time leads to buffer overflow.

This vulnerability is known as CVE-2025-8940. The attack can be launched remotely. Furthermore, there is an exploit available.VulDB Recent EntriesRead More