high8.8
CVE-2025-10120
A vulnerability was detected in Tenda AC20 up to 16.03.08.12.
Impact
A vulnerability was detected in Tenda AC20 up to 16.03.08.12. The impacted element is the function strcpy of the file /goform/GetParentControlInfo. The manipulation of the argument mac results in buffer overflow. The attack may be performed from remote. The exploit is now public and may be used.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tenda | Ac20 Firmware | through 16.03.08.12 |