Vulnerability Bulletins |
CVE-2025-14654 |
|
| Affected software | HTTPD |
| A vulnerability was identified in Tenda AC20 16.03.08.12. The affected element is the function formSetPPTPUserList of the file /goform/setPptpUserList of the component httpd. Such manipulation of the argument list leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2025-14654 | |