CVE-2025-13258: Tenda AC20 WifiExtraSet buffer overflow
A vulnerability was detected in Tenda AC20 up to 16.03.08.12. The impacted element is an unknown function of the file /goform/WifiExtraSet. The manipulation of the argument wpapskcrypto results in buffer overflow. The attack can be launched remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13258?
CVE-2025-13258 has a high severity rating due to its ability to be exploited remotely, causing a buffer overflow.
How do I fix CVE-2025-13258?
To fix CVE-2025-13258, upgrade the Tenda AC20 firmware to a version later than 16.03.08.12.
Who is affected by CVE-2025-13258?
CVE-2025-13258 affects Tenda AC20 devices running firmware version 16.03.08.12 and earlier.
What type of vulnerability is CVE-2025-13258?
CVE-2025-13258 is a buffer overflow vulnerability found in the /goform/WifiExtraSet function.
Can CVE-2025-13258 be exploited remotely?
Yes, CVE-2025-13258 can be exploited remotely, making it particularly dangerous for users.