CVE-2025-10838
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk63th percentile - higher than 63% of all known CVEs
Summary
A vulnerability was identified in Tenda AC21 16.03.08.16. The affected element is the function sub_45BB10 of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk_crypto leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
Risk Assessment
An attacker remotely can trigger a buffer overflow, potentially leading to arbitrary code execution or device crash, and possibly take control of the router.
Recommendation
Update Tenda AC21 firmware to the latest version if a fix is available. Restrict device access from external networks and monitor public exploits.
Other vulnerabilities in Tenda AC21
See all- CVE-2025-13446High
Tenda AC21 16.03.08.16 has a vulnerability in unknown code of /goform/SetSysTimeCfg. Manipulation of the timeZone/time arguments leads to a stack-based buffer overflow, and the attack can be carried out remotely. The exploit has been publicly disclosed and may be used.
- CVE-2025-12611High
A vulnerability was identified in Tenda AC21 16.03.08.16 affecting the formSetPPTPServer function of the file /goform/SetPptpServerCfg. Manipulation of the startIp argument leads to buffer overflow, and remote exploitation of the attack is possible.
- CVE-2025-11091High
A buffer overflow vulnerability has been discovered in Tenda AC21 up to 16.03.08.16, affecting the sscanf function in /goform/SetStaticRouteCfg. Manipulation of the list argument results in buffer overflow. The attack can be launched remotely and the exploit has been released to the public.
Original NVD description (English source)
A vulnerability was identified in Tenda AC21 16.03.08.16. The affected element is the function sub_45BB10 of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk_crypto leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS