VendorsTendaac21_firmwareall versions
Vulnerabilities

Tenda AC21 Firmware

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

29CVEs
CVE-2025-9605
Tenda AC21/AC23 GetParentControlInfo stack-based overflow
Published 2025-08-29 · Analyzed
10.0EPSS 0.051
CVE-2025-13446
Tenda AC21 SetSysTimeCfg stack-based overflow
Published 2025-11-20 · Analyzed
9.8EPSS 0.039
CVE-2025-13445
Tenda AC21 SetIpMacBind stack-based overflow
Published 2025-11-20 · Modified
9.8EPSS 0.039
CVE-2025-12611
Tenda AC21 SetPptpServerCfg formSetPPTPServer buffer overflow
Published 2025-11-03 · Analyzed
9.8EPSS 0.007
CVE-2025-10838
Tenda AC21 WifiExtraSet sub_45BB10 buffer overflow
Published 2025-09-23 · Analyzed
9.0EPSS 0.010
CVE-2026-4565
Tenda AC21 SetNetControlList formSetQosBand buffer overflow
Published 2026-03-23 · Analyzed
9.0EPSS 0.010
CVE-2025-11091
Tenda AC21 SetStaticRouteCfg sscanf buffer overflow
Published 2025-09-28 · Analyzed
9.0EPSS 0.007
CVE-2026-1637
Tenda AC21 AdvSetMacMtuWan fromAdvSetMacMtuWan stack-based overflow
Published 2026-01-29 · Analyzed
9.0EPSS 0.007
CVE-2026-1638
Tenda AC21 mDMZSetCfg command injection
Published 2026-01-29 · Analyzed
8.8EPSS 0.021
CVE-2023-24333
A stack overflow vulnerability in Tenda AC21 with firmware version US_AC21V1.0re_V16.03.08.15_cn_TDC01 allows attackers to run arbitrary commands via crafted POST request to /goform/openSchedWifi.
Published 2024-02-21 · Analyzed
8.8EPSS 0.005
CVE-2022-40073
Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, saveParentControlInfo.
Published 2022-09-19 · Modified
7.5EPSS 0.010
CVE-2022-40067
Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: formSetVirtualSer.
Published 2022-09-19 · Modified
7.5EPSS 0.010
CVE-2022-40068
Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: formSetQosBand.
Published 2022-09-19 · Modified
7.5EPSS 0.010
CVE-2022-40069
]Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: fromSetSysTime.
Published 2022-09-19 · Modified
7.5EPSS 0.010
CVE-2022-40070
Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via bin/httpd, function: formSetFirewallCfg.
Published 2022-09-19 · Modified
7.5EPSS 0.010
CVE-2022-40071
Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, formSetDeviceName.
Published 2022-09-19 · Modified
7.5EPSS 0.010
CVE-2022-40076
Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: fromSetWifiGusetBasic.
Published 2022-09-19 · Modified
7.5EPSS 0.010
CVE-2022-40075
Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, form_fast_setting_wifi_set.
Published 2022-09-19 · Modified
7.5EPSS 0.010
CVE-2022-40074
Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, setSchedWifi.
Published 2022-09-19 · Modified
7.5EPSS 0.010
CVE-2022-40072
Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: setSmartPowerManagement.
Published 2022-09-19 · Modified
7.5EPSS 0.010
CVE-2022-44163
Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via function formSetMacFilterCfg.
Published 2022-11-21 · Modified
7.5EPSS 0.009
CVE-2022-44158
Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via function via set_device_name.
Published 2022-11-21 · Modified
7.5EPSS 0.009
CVE-2026-2148
Tenda AC21 Web Management DownloadFlash information disclosure
Published 2026-02-08 · Analyzed
7.5EPSS 0.006
CVE-2026-2147
Tenda AC21 Web Management DownloadLog information disclosure
Published 2026-02-08 · Analyzed
5.5EPSS 0.005
CVE-2025-65222
Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the rebootTime parameter of /goform/SetSysAutoRebbotCfg.
Published 2025-11-20 · Analyzed
4.3EPSS 0.024
CVE-2025-65221
Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the list parameter of /goform/setPptpUserList.
Published 2025-11-20 · Analyzed
4.3EPSS 0.003
CVE-2025-65223
Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the urls parameter of /goform/saveParentControlInfo.
Published 2025-11-20 · Analyzed
4.3EPSS 0.003
CVE-2025-65220
Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow in: /goform/SetVirtualServerCfg via the list parameter.
Published 2025-11-20 · Analyzed
4.3EPSS 0.002
CVE-2025-65226
Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the deviceId parameter in /goform/saveParentControlInfo.
Published 2025-11-20 · Analyzed
4.3EPSS 0.002