---
id: CVE-2025-10815
title: A vulnerability was identified in Tenda AC20 up to 16.03.08.12
summary: >-
  A vulnerability was identified in Tenda AC20 up to 16.03.08.12. Affected by
  this issue is the function strcpy of the file /goform/SetPptpServerCfg of the
  component HTTP POST Request Handler. Such manipulation of the argument startIp
  lead…
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-119
  - CWE-120
vendor: tenda
product: ac20_firmware
affected:
  - ac20_firmware <= 16.03.08.12
published: '2025-09-22'
updated: '2026-10-11'
sourceUpdated: '2026-10-11T20:10:00.200'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-10815'
references:
  - url: 'https://github.com/Juana-2u/Tenda-AC20'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?ctiid.325173'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?id.325173'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?submit.654460'
    label: cna@vuldb.com
  - url: 'https://www.tenda.com.cn/'
    label: cna@vuldb.com
tags:
  - nvd
epss: 0.00832
epssPercentile: 0.56439
ingestedAt: '2026-10-12T14:50:33.968Z'
---

## Overview

A vulnerability was identified in Tenda AC20 up to 16.03.08.12. Affected by this issue is the function strcpy of the file /goform/SetPptpServerCfg of the component HTTP POST Request Handler. Such manipulation of the argument startIp leads to buffer overflow. The attack can be launched remotely. The exploit is publicly available and might be used.

## Affected

- `ac20_firmware <= 16.03.08.12`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.