Tenda Ac21 vulnerabilities

29 vulnerabilities

Known vulnerabilities in Tenda Ac21, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CriticalCVE-2025-13446tenda · ac21_firmwareTenda AC21 SetSysTimeCfg stack-based overflowA vulnerability has been found in Tenda AC21 16.03.08.16. This vulnerability affects unknown code of the file /goform/SetSysTimeCfg. The manipulation of the argument timeZone/time leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.EPSS4.21%9.8CriticalCVE-2025-13445tenda · ac21_firmwareTenda AC21 SetIpMacBind stack-based overflowA flaw has been found in Tenda AC21 16.03.08.16. This affects an unknown part of the file /goform/SetIpMacBind. Executing a manipulation of the argument list can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been published and may be used.EPSS4.21%4.3MediumCVE-2025-65226tenda · ac21_firmwaretenda ac21_firmwareTenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the deviceId parameter in /goform/saveParentControlInfo.EPSS0.26%4.3MediumCVE-2025-65221tenda · ac21_firmwaretenda ac21_firmwareTenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the list parameter of /goform/setPptpUserList.EPSS0.32%4.3MediumCVE-2025-65222tenda · ac21_firmwaretenda ac21_firmwareTenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the rebootTime parameter of /goform/SetSysAutoRebbotCfg.EPSS2.52%4.3MediumCVE-2025-65220tenda · ac21_firmwaretenda ac21_firmwareTenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow in: /goform/SetVirtualServerCfg via the list parameter.EPSS0.26%4.3MediumCVE-2025-65223tenda · ac21_firmwaretenda ac21_firmwareTenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the urls parameter of /goform/saveParentControlInfo.EPSS0.32%9CriticalCVE-2025-11091tenda · ac21_firmwareTenda AC21 SetStaticRouteCfg sscanf buffer overflowA security flaw has been discovered in Tenda AC21 up to 16.03.08.16. Affected by this vulnerability is the function sscanf of the file /goform/SetStaticRouteCfg. The manipulation of the argument list results in buffer overflow. The attack can be launched remotely. The exploit has been released to the public and may be exploited.EPSS0.75%10CriticalCVE-2025-9605tenda · ac21_firmware +1 moreTenda AC21/AC23 GetParentControlInfo stack-based overflowA security vulnerability has been detected in Tenda AC21 and AC23 16.03.08.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. Such manipulation of the argument mac leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.EPSS5.57%9CriticalCVE-2025-10838tenda · ac21_firmwareTenda AC21 WifiExtraSet sub_45BB10 buffer overflowA vulnerability was identified in Tenda AC21 16.03.08.16. The affected element is the function sub_45BB10 of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk_crypto leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.EPSS1.06%9.8CriticalCVE-2025-12611tenda · ac21_firmwareTenda AC21 SetPptpServerCfg formSetPPTPServer buffer overflowA vulnerability was identified in Tenda AC21 16.03.08.16. This vulnerability affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg. The manipulation of the argument startIp leads to buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.EPSS0.74%7.5HighCVE-2022-40067tenda · ac21_firmwaretenda ac21_firmwareTenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: formSetVirtualSer.EPSS1.01%7.5HighCVE-2022-40074tenda · ac21_firmwaretenda ac21_firmwareTenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, setSchedWifi.EPSS1.01%7.5HighCVE-2022-40076tenda · ac21_firmwaretenda ac21_firmwareTenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: fromSetWifiGusetBasic.EPSS1.01%7.5HighCVE-2022-40070tenda · ac21_firmwaretenda ac21_firmwareTenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via bin/httpd, function: formSetFirewallCfg.EPSS1.01%7.5HighCVE-2022-40068tenda · ac21_firmwaretenda ac21_firmwareTenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: formSetQosBand.EPSS1.01%7.5HighCVE-2022-40075tenda · ac21_firmwaretenda ac21_firmwareTenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, form_fast_setting_wifi_set.EPSS1.01%7.5HighCVE-2022-40069tenda · ac21_firmwaretenda ac21_firmware]Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: fromSetSysTime.EPSS1.01%7.5HighCVE-2022-40072tenda · ac21_firmwaretenda ac21_firmwareTenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: setSmartPowerManagement.EPSS1.01%7.5HighCVE-2022-40073tenda · ac21_firmwaretenda ac21_firmwareTenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, saveParentControlInfo.EPSS1.01%