Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2025-14654

Tenda AC20 httpd setPptpUserList formSetPPTPUserList stack-based overflow

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A vulnerability was identified in Tenda AC20 16.03.08.12. The affected element is the function formSetPPTPUserList of the file /goform/setPptpUserList of the component httpd. Such manipulation of the argument list leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Tenda AC20

  • 16.03.08.12affected

References