Vulnerability · Published Aug 17, 2025 · Assigned by VulDB
CVE-2025-9090Tenda AC20 Telnet Service telnet websFormDefine command injection
Medium 6.3
In plain English
A medium-severity command injection in AC20 from Tenda. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 16.7% (higher than 97% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Official description
A vulnerability was identified in Tenda AC20 16.03.08.12. Affected is the function websFormDefine of the file /goform/telnet of the component Telnet Service. The manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected products (as reported)
Weakness: CWE-77, CWE-74 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
References
- VDB-320358 | Tenda AC20 Telnet Service telnet websFormDefine command injection vdb-entry, technical-description
- VDB-320358 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- Submit #632232 | Tenda AC20 V16.03.08.12 Command Injection third-party-advisory
- https://github.com/ZZ2266/.github.io/blob/main/AC20/telnet/readme.md related
- https://github.com/ZZ2266/.github.io/blob/main/AC20/telnet/readme.md#poc-exploit-steps exploit
- https://www.tenda.com.cn/ product