Ac21 Firmware (Tenda) - vulnerabilities (CVEs)

29 CVEs, 0 in the last 30 days, 6 known versions, newest CVE from 2026-03-23. Vendor: Tenda.

CVEs of Ac21 Firmware

• CVE-2026-4565 - CVSS 8.8 (high), 2026-03-23: A vulnerability was detected in Tenda AC21 16.03.08.16. Impacted is the function formSetQosBand of the file /goform/SetNetControlList. Performing a…
• CVE-2026-2148 - CVSS 7.5 (high), 2026-02-08: A security vulnerability has been detected in Tenda AC21 16.03.08.16. Affected is an unknown function of the file /cgi-bin/DownloadFlash of the component Web…
• CVE-2026-2147 - CVSS 6.9 (medium), 2026-02-08: A weakness has been identified in Tenda AC21 16.03.08.16. This impacts an unknown function of the file /cgi-bin/DownloadLog of the component Web Management…
• CVE-2026-1638 - CVSS 8.8 (high), 2026-01-30: A security flaw has been discovered in Tenda AC21 1.1.1.1/1.dmzip/16.03.08.16. The impacted element is the function mDMZSetCfg of the file /goform/mDMZSetCfg.…
• CVE-2026-1637 - CVSS 8.8 (high), 2026-01-29: A vulnerability was identified in Tenda AC21 16.03.08.16. The affected element is the function fromAdvSetMacMtuWan of the file /goform/AdvSetMacMtuWan. The…
• CVE-2025-65220 - CVSS 4.3 (medium), 2025-11-20: Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow in: /goform/SetVirtualServerCfg via the list parameter.
• CVE-2025-65223 - CVSS 4.3 (medium), 2025-11-20: Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the urls parameter of /goform/saveParentControlInfo.
• CVE-2025-65222 - CVSS 4.3 (medium), 2025-11-20: Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the rebootTime parameter of /goform/SetSysAutoRebbotCfg.
• CVE-2025-65221 - CVSS 4.3 (medium), 2025-11-20: Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the list parameter of /goform/setPptpUserList.
• CVE-2025-65226 - CVSS 4.3 (medium), 2025-11-20: Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the deviceId parameter in /goform/saveParentControlInfo.
• CVE-2025-13446 - CVSS 9.8 (critical), 2025-11-20: A vulnerability has been found in Tenda AC21 16.03.08.16. This vulnerability affects unknown code of the file /goform/SetSysTimeCfg. The manipulation of the…
• CVE-2025-13445 - CVSS 9.8 (critical), 2025-11-20: A flaw has been found in Tenda AC21 16.03.08.16. This affects an unknown part of the file /goform/SetIpMacBind. Executing a manipulation of the argument list…
• CVE-2025-12611 - CVSS 9.8 (critical), 2025-11-03: A vulnerability was identified in Tenda AC21 16.03.08.16. This vulnerability affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg. The…
• CVE-2025-11091 - CVSS 8.8 (high), 2025-09-28: A security flaw has been discovered in Tenda AC21 up to 16.03.08.16. Affected by this vulnerability is the function sscanf of the file…
• CVE-2025-10838 - CVSS 8.8 (high), 2025-09-23: A vulnerability was identified in Tenda AC21 16.03.08.16. The affected element is the function sub_45BB10 of the file /goform/WifiExtraSet. The manipulation…
• CVE-2025-9605 - CVSS 9.8 (critical), 2025-08-29: A security vulnerability has been detected in Tenda AC21 and AC23 16.03.08.16. Affected is the function GetParentControlInfo of the file…
• CVE-2023-24333 - CVSS 8.8 (high), 2024-02-21: A stack overflow vulnerability in Tenda AC21 with firmware version US_AC21V1.0re_V16.03.08.15_cn_TDC01 allows attackers to run arbitrary commands via crafted…
• CVE-2022-44163 - CVSS 7.5 (high), 2022-11-21: Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via function formSetMacFilterCfg.
• CVE-2022-44158 - CVSS 7.5 (high), 2022-11-21: Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via function via set_device_name.
• CVE-2022-40070 - CVSS 7.5 (high), 2022-09-19: Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via bin/httpd, function: formSetFirewallCfg.
• CVE-2022-40073 - CVSS 7.5 (high), 2022-09-19: Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, saveParentControlInfo.
• CVE-2022-40076 - CVSS 7.5 (high), 2022-09-19: Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: fromSetWifiGusetBasic.
• CVE-2022-40069 - CVSS 7.5 (high), 2022-09-19: ]Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: fromSetSysTime.
• CVE-2022-40072 - CVSS 7.5 (high), 2022-09-19: Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: setSmartPowerManagement.
• CVE-2022-40075 - CVSS 7.5 (high), 2022-09-19: Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, form_fast_setting_wifi_set.
• CVE-2022-40068 - CVSS 7.5 (high), 2022-09-19: Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: formSetQosBand.
• CVE-2022-40071 - CVSS 7.5 (high), 2022-09-19: Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, formSetDeviceName.
• CVE-2022-40074 - CVSS 7.5 (high), 2022-09-19: Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, setSchedWifi.
• CVE-2022-40067 - CVSS 7.5 (high), 2022-09-19: Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: formSetVirtualSer.