High · published December 14, 2025
⚡ A cunning stack-based buffer overflow lurks in the Tenda AC20 that could give an attacker remote access — like leaving a window open for a burglar! 🔥 Think of the function formSetRebootTimer as an overly trusting restaurant that accepts any dish order without checking the kitchen's capabilities. If someone orders more than they can handle, the whole operation could crash! An attacker could send a specially crafted request to the device, leading to a complete system compromise. This could allow for unauthorized access, altered configurations, or even system crashes — a real nightmare for anyone relying on this router!
Think of the function formSetRebootTimer as an overly trusting restaurant that accepts any dish order without checking the kitchen's capabilities. If someone orders more than they can handle, the whole operation could crash! This vulnerability occurs in the function formSetRebootTimer of the /goform/SetSysAutoRebbotCfg file, where manipulating the rebootTime argument leads to a stack-based buffer overflow. This kind of overflow can let attackers execute arbitrary code remotely.
An attacker could send a specially crafted request to the device, leading to a complete system compromise. This could allow for unauthorized access, altered configurations, or even system crashes — a real nightmare for anyone relying on this router! To mitigate this risk, patch your Tenda AC20 to the latest firmware version as soon as it is available. Additionally, consider restricting access to the device's management interface and monitor logs for any suspicious activity. You've got this! By taking these steps, you can fortify your security and keep your network safe! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| tenda/ac20_firmware | all versions | — |