CVE-2025-8160 | Tenda AC20 up to 16.03.08.12 httpd /goform/SetSysTimeCfg timeZone buffer overflow

A vulnerability classified as critical has been found in Tenda AC20 up to 16.03.08.12. Affected is an unknown function of the file /goform/SetSysTimeCfg of the component httpd. The manipulation of the argument timeZone leads to buffer overflow.

This vulnerability is traded as CVE-2025-8160. It is possible to launch the attack remotely. Furthermore, there is an exploit available.