Vulnerability Description
A weakness has been identified in Tenda AC20 16.03.08.05. This vulnerability affects unknown code of the file /goform/fromAdvSetMacMtuWan. This manipulation of the argument wanMTU causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Tenda | Ac20 Firmware | 16.03.08.5 |
| Tenda | Ac20 | - |
Related Weaknesses (CWE)
References
- https://github.com/Cpppq43/Tenda/blob/main/Tenda_AC20_V16.03.08.05.mdExploitThird Party Advisory
- https://github.com/Cpppq43/Tenda/blob/main/Tenda_AC20_V16.03.08.05.md#pocExploitThird Party Advisory
- https://vuldb.com/?ctiid.322106Permissions RequiredVDB Entry
- https://vuldb.com/?id.322106Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.641088Third Party AdvisoryVDB Entry
- https://www.tenda.com.cn/Product
- https://github.com/Cpppq43/Tenda/blob/main/Tenda_AC20_V16.03.08.05.mdExploitThird Party Advisory
- https://github.com/Cpppq43/Tenda/blob/main/Tenda_AC20_V16.03.08.05.md#pocExploitThird Party Advisory
FAQ
What is CVE-2025-9791?
CVE-2025-9791 is a vulnerability with a CVSS score of 8.8 (HIGH). A weakness has been identified in Tenda AC20 16.03.08.05. This vulnerability affects unknown code of the file /goform/fromAdvSetMacMtuWan. This manipulation of the argument wanMTU causes stack-based b...
How severe is CVE-2025-9791?
CVE-2025-9791 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-9791?
Check the references section above for vendor advisories and patch information. Affected products include: Tenda Ac20 Firmware, Tenda Ac20.