CVE-2025-10838highCWE-119CWE-120

CVE-2025-10838: falha de alta gravidade em Tenda AC21

Tenda AC21 WifiExtraSet sub_45BB10 buffer overflow

Publicada em

Seguir esta CVE+ Monitorar AC21

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.7epss 1.1%
A vulnerability was identified in Tenda AC21 16.03.08.16. The affected element is the function sub_45BB10 of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk_crypto leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Produtos afetados
Tenda · AC21
CVEs relacionadas — Tenda AC21

No mesmo produto, das mais perigosas para as menos.

CVE-2025-9605CRITICALTenda AC21/AC23 GetParentControlInfo stack-based overflowEPSS 6.0%CVE-2025-13446HIGHTenda AC21 SetSysTimeCfg stack-based overflowEPSS 4.2%CVE-2025-13445HIGHTenda AC21 SetIpMacBind stack-based overflowEPSS 4.2%CVE-2026-1638MEDIUMTenda AC21 mDMZSetCfg command injectionEPSS 2.2%CVE-2026-4565HIGHTenda AC21 SetNetControlList formSetQosBand buffer overflowEPSS 1.0%CVE-2025-11091HIGHTenda AC21 SetStaticRouteCfg sscanf buffer overflowEPSS 0.8%