VYPR
High severity8.8NVD Advisory· Published Dec 14, 2025· Updated Jun 17, 2026

CVE-2025-14655

CVE-2025-14655

Description

A security flaw has been discovered in Tenda AC20 16.03.08.12. The impacted element is the function formSetRebootTimer of the file /goform/SetSysAutoRebbotCfg of the component httpd. Performing a manipulation of the argument rebootTime results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Tenda/Ac20inferred2 versions
    =16.03.08.12+ 1 more
    • (no CPE)range: =16.03.08.12
    • (no CPE)range: 16.03.08.12
  • cpe:2.3:o:tenda:ac20_firmware:16.03.08.12:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.