279 matches found
CVE-2025-11091 Tenda AC21 SetStaticRouteCfg sscanf buffer overflow
A security flaw has been discovered in Tenda AC21 up to 16.03.08.16. Affected by this vulnerability is the function sscanf of the file /goform/SetStaticRouteCfg. The manipulation of the argument list results in buffer overflow. The attack can be launched remotely. The exploit has been released to...
CVE-2025-11091
Summary: CVE-2025-11091 affects Tenda AC21 routers (firmware up to 16.03.08.16). The vulnerability is in the sscanf-based processing of /goform/SetStaticRouteCfg, where incorrect manipulation of the argument list leads to a buffer overflow. The issue can be exploited remotely and, according to th...
Tenda AC21 安全漏洞
Tenda AC21 is a wireless router from Tenda China. A security vulnerability exists in Tenda AC21 16.03.08.16 and earlier versions, which stems from an incorrect manipulation of the parameter list in the file /goform/SetStaticRouteCfg, which could result in a buffer overflow...
CVE-2025-10838
A vulnerability was identified in Tenda AC21 16.03.08.16. The affected element is the function sub45BB10 of the file /goform/WifiExtraSet. The manipulation of the argument wpapskcrypto leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and...
Tenda AC21 Buffer Overflow Vulnerability (CNVD-2025-30948)
The Tenda AC21 is a wireless router from the Chinese company Tenda. The Tenda AC21 suffers from a buffer overflow vulnerability, which originates from the parameter wpapskcrypto of the function sub45BB10 in the file /goform/WifiExtraSet that fails to correctly validate the length of the input dat...
CVE-2025-10838
A vulnerability was identified in Tenda AC21 16.03.08.16. The affected element is the function sub45BB10 of the file /goform/WifiExtraSet. The manipulation of the argument wpapskcrypto leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and...
CVE-2025-10838
A vulnerability was identified in Tenda AC21 16.03.08.16. The affected element is the function sub45BB10 of the file /goform/WifiExtraSet. The manipulation of the argument wpapskcrypto leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and...
CVE-2025-10838
CVE-2025-10838 affects the Tenda AC21 router (firmware 16.03.08.16). The vulnerability resides in the function sub_45BB10 in the file /goform/WifiExtraSet, where manipulation of the wpapsk_crypto argument allows a buffer overflow. This can be exploited remotely and publicly available exploit code...
CVE-2025-10838 Tenda AC21 WifiExtraSet sub_45BB10 buffer overflow
A vulnerability was identified in Tenda AC21 16.03.08.16. The affected element is the function sub45BB10 of the file /goform/WifiExtraSet. The manipulation of the argument wpapskcrypto leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and...
Tenda AC21 安全漏洞
The Tenda AC21 is a wireless router from the Chinese company Tenda. The Tenda AC21 suffers from a buffer overflow vulnerability, which originates from the parameter wpapskcrypto of the function sub45BB10 in the file /goform/WifiExtraSet that fails to correctly validate the length of the input dat...
PT-2025-39115
Name of the Vulnerable Software and Affected Versions Tenda AC21 version 16.03.08.16 Description A buffer overflow issue exists in the function sub 45BB10 of the file /goform/WifiExtraSet. Manipulation of the wpapsk crypto argument can trigger this issue, allowing for remote exploitation. The...
CVE-2025-9605
A security vulnerability has been detected in Tenda AC21 and AC23 16.03.08.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. Such manipulation of the argument mac leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has...
CVE-2025-9605
A security vulnerability has been detected in Tenda AC21 and AC23 16.03.08.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. Such manipulation of the argument mac leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has...
CVE-2025-9605 Tenda AC21/AC23 GetParentControlInfo stack-based overflow
A security vulnerability has been detected in Tenda AC21 and AC23 16.03.08.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. Such manipulation of the argument mac leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has...
CVE-2025-9605
CVE-2025-9605 affects Tenda AC21/AC23 routers (version 16.03.08.16). The GetParentControlInfo function in /goform/GetParentControlInfo is vulnerable to a stack-based buffer overflow caused by manipulation of the mac argument. This enables remote exploitation (attack vector: NETWORK) and has publi...
Tenda AC23和Tenda AC21 安全漏洞
Tenda AC23 and Tenda AC21 are both products of Tenda, a Chinese company.Tenda AC23 is a dual-band gigabit wireless router.Tenda AC21 is a wireless router. A security vulnerability exists in Tenda AC23 and Tenda AC21 version 16.03.08.16, which originates from a stack buffer overflow due to incorre...
PT-2025-35174
Name of the Vulnerable Software and Affected Versions: Tenda AC21 version 16.03.08.16 Tenda AC23 version 16.03.08.16 Description: A stack-based buffer overflow vulnerability exists in the GetParentControlInfo function of the /goform/GetParentControlInfo file in Tenda AC21 and AC23 routers...
CVE-2023-24333
A stack overflow vulnerability in Tenda AC21 with firmware version USAC21V1.0reV16.03.08.15cnTDC01 allows attackers to run arbitrary commands via crafted POST request to /goform/openSchedWifi...