CVE-2025-14656: Tenda AC20 openSchedWifi httpd buffer overflow
A weakness has been identified in Tenda AC20 16.03.08.12. This affects the function httpd of the file /goform/openSchedWifi. Executing a manipulation of the argument schedStartTime/schedEndTime can lead to buffer overflow. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14656?
CVE-2025-14656 is considered a high severity vulnerability due to the potential for remote exploitation leading to buffer overflow.
How do I fix CVE-2025-14656?
To fix CVE-2025-14656, users should update the Tenda AC20 firmware to the latest available version.
What is the impact of CVE-2025-14656?
The impact of CVE-2025-14656 includes potential denial of service or remote code execution through buffer overflow.
Who is affected by CVE-2025-14656?
CVE-2025-14656 affects all Tenda AC20 devices running firmware version 16.03.08.12.
Can CVE-2025-14656 be exploited remotely?
Yes, CVE-2025-14656 can be exploited remotely by manipulating specific arguments in the affected httpd function.