CVE-2025-65222
MediumCVSS 4.3Exploitation Probability (EPSS)
High risk85th percentile - higher than 85% of all known CVEs
Summary
The Tenda AC21 router version V16.03.08.16 is vulnerable to a buffer overflow via the rebootTime parameter of /goform/SetSysAutoRebbotCfg. An attacker can send a crafted request that triggers the overflow.
Risk Assessment
Exploitation of the buffer overflow may crash the device or potentially lead to remote code execution. This threatens the availability and security of the network managed by the router.
Recommendation
Restrict access to the router's management interface from the WAN and update the firmware to a fixed version when available. Monitor the vendor's advisories.
Other vulnerabilities in Tenda AC21
See all- CVE-2025-13446High
Tenda AC21 16.03.08.16 has a vulnerability in unknown code of /goform/SetSysTimeCfg. Manipulation of the timeZone/time arguments leads to a stack-based buffer overflow, and the attack can be carried out remotely. The exploit has been publicly disclosed and may be used.
- CVE-2025-65226Medium
Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the deviceId parameter in /goform/saveParentControlInfo.
- CVE-2025-65223Medium
Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the urls parameter of /goform/saveParentControlInfo. A remote attacker can exploit this to execute arbitrary code or cause a denial of service.
- CVE-2025-65221Medium
Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the list parameter of /goform/setPptpUserList. A remote attacker can exploit this to execute arbitrary code or cause a denial of service.
- CVE-2025-65220Medium
Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow in /goform/SetVirtualServerCfg via the list parameter.
- CVE-2025-12611High
A vulnerability was identified in Tenda AC21 16.03.08.16 affecting the formSetPPTPServer function of the file /goform/SetPptpServerCfg. Manipulation of the startIp argument leads to buffer overflow, and remote exploitation of the attack is possible.
- CVE-2025-11091High
A buffer overflow vulnerability has been discovered in Tenda AC21 up to 16.03.08.16, affecting the sscanf function in /goform/SetStaticRouteCfg. Manipulation of the list argument results in buffer overflow. The attack can be launched remotely and the exploit has been released to the public.
- CVE-2025-10838High
A vulnerability was identified in Tenda AC21 16.03.08.16. The affected element is the function sub_45BB10 of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk_crypto leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
Original NVD description (English source)
Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the rebootTime parameter of /goform/SetSysAutoRebbotCfg.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS