Tenda AC21 SetStaticRouteCfg sscanf buffer overflow

8.7 CVSS

Vulnerability Description

A security flaw has been discovered in Tenda AC21 up to 16.03.08.16. Affected by this vulnerability is the function sscanf of the file /goform/SetStaticRouteCfg. The manipulation of the argument list results in buffer overflow. The attack can be launched remotely. The exploit has been released to the public and may be exploited.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-11091

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

MaximDeVere (VulDB User)

References

More from Tenda

View All →

CVE-2025-9828

Tenda CP6 uhttp sub_2B7D04 risky encryption

Medium 6.3

CVE-2025-9813

Tenda CH22 SetSambaConf formSetSambaConf buffer overflow

High 8.7

CVE-2025-9812

Tenda CH22 exeCommand formexeCommand buffer overflow

High 8.7

CVE-2025-9806

Tenda F1202 Administrative shadow hard-coded credentials

Low 1.8

CVE-2025-9791

Tenda AC20 fromAdvSetMacMtuWan stack-based overflow

High 8.7

Affected Vendor

Tenda

View all reports →

Affected Software

AC21

Vulnerable Versions:

16.03.08.0, 16.03.08.1, 16.03.08.2, 16.03.08.3, 16.03.08.4, 16.03.08.5, 16.03.08.6, 16.03.08.7, 16.03.08.8, 16.03.08.9, 16.03.08.10, 16.03.08.11, 16.03.08.12, 16.03.08.13, 16.03.08.14, 16.03.08.15, 16.03.08.16