Tenda AC20 HTTP POST Request SetPptpServerCfg strcpy buffer overflow

8.7 CVSS

Vulnerability Description

A vulnerability was identified in Tenda AC20 up to 16.03.08.12. Affected by this issue is the function strcpy of the file /goform/SetPptpServerCfg of the component HTTP POST Request Handler. Such manipulation of the argument startIp leads to buffer overflow. The attack can be launched remotely. The exploit is publicly available and might be used.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-10815

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Juana_2u (VulDB User)

References

More from Tenda

View All →

CVE-2025-9828

Tenda CP6 uhttp sub_2B7D04 risky encryption

Medium 6.3

CVE-2025-9813

Tenda CH22 SetSambaConf formSetSambaConf buffer overflow

High 8.7

CVE-2025-9812

Tenda CH22 exeCommand formexeCommand buffer overflow

High 8.7

CVE-2025-9806

Tenda F1202 Administrative shadow hard-coded credentials

Low 1.8

CVE-2025-9791

Tenda AC20 fromAdvSetMacMtuWan stack-based overflow

High 8.7

Affected Vendor

Tenda

View all reports →

Affected Software

AC20

Vulnerable Versions:

16.03.08.0, 16.03.08.1, 16.03.08.2, 16.03.08.3, 16.03.08.4, 16.03.08.5, 16.03.08.6, 16.03.08.7, 16.03.08.8, 16.03.08.9, 16.03.08.10, 16.03.08.11, 16.03.08.12