CVE-2025-13445: falha de alta gravidade em Tenda AC21
Tenda AC21 SetIpMacBind stack-based overflow
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.7epss 4.2%
A flaw has been found in Tenda AC21 16.03.08.16. This affects an unknown part of the file /goform/SetIpMacBind. Executing a manipulation of the argument list can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been published and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Produtos afetados
Tenda · AC21CVEs relacionadas — Tenda AC21
No mesmo produto, das mais perigosas para as menos.
CVE-2025-9605CRITICALTenda AC21/AC23 GetParentControlInfo stack-based overflowEPSS 6.0%CVE-2025-13446HIGHTenda AC21 SetSysTimeCfg stack-based overflowEPSS 4.2%CVE-2026-1638MEDIUMTenda AC21 mDMZSetCfg command injectionEPSS 2.2%CVE-2025-10838HIGHTenda AC21 WifiExtraSet sub_45BB10 buffer overflowEPSS 1.1%CVE-2026-4565HIGHTenda AC21 SetNetControlList formSetQosBand buffer overflowEPSS 1.0%CVE-2025-11091HIGHTenda AC21 SetStaticRouteCfg sscanf buffer overflowEPSS 0.8%