AC
Product
AC21
29
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 19Medium 6Low 0
Watch
Add AC21 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-13446 | 9.8 | Nov 20 | Tenda AC21 SetSysTimeCfg stack-based overflow Affected: 16.03.08.16 |
| CVE-2025-13445 | 9.8 | Nov 20 | Tenda AC21 SetIpMacBind stack-based overflow Affected: 16.03.08.16 |
| CVE-2025-12611 | 9.8 | Nov 3 | Tenda AC21 SetPptpServerCfg formSetPPTPServer buffer overflow Affected: 16.03.08.16 |
| CVE-2025-9605 | 9.8 | Aug 29 | Tenda AC21/AC23 GetParentControlInfo stack-based overflow Affected: 16.03.08.16 |
| CVE-2026-4565 | 8.8 | Mar 23 | Tenda AC21 SetNetControlList formSetQosBand buffer overflow Affected: 16.03.08.16 |
| CVE-2026-1638 | 8.8 | Jan 29 | Tenda AC21 mDMZSetCfg command injection Affected: 1.1.1.1; 1.dmzip; 16.03.08.16 |
| CVE-2026-1637 | 8.8 | Jan 29 | Tenda AC21 AdvSetMacMtuWan fromAdvSetMacMtuWan stack-based overflow Affected: 16.03.08.16 |
| CVE-2025-11091 | 8.8 | Sep 28 | Tenda AC21 SetStaticRouteCfg sscanf buffer overflow Affected: through 16.03.08.16 |
| CVE-2025-10838 | 8.8 | Sep 23 | Tenda AC21 WifiExtraSet sub_45BB10 buffer overflow Affected: through 16.03.08.16 |
| CVE-2023-24333 | 8.8 | Feb 21 | A stack overflow vulnerability in Tenda AC21 with firmware version US_AC21V1.0re_V16.03.08.15_cn_TDC01 allows attackers to run arbitrary commands via crafted POST request to… Affected: 16.03.08.15 |
| CVE-2026-2148 | 7.5 | Feb 8 | Tenda AC21 Web Management DownloadFlash information disclosure Affected: 16.03.08.16 |
| CVE-2022-44163 | 7.5 | Nov 21 | Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via function formSetMacFilterCfg Affected: 16.03.08.15 |
| CVE-2022-44158 | 7.5 | Nov 21 | Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via function via set_device_name Affected: 16.03.08.15 |
| CVE-2022-40076 | 7.5 | Sep 19 | Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: fromSetWifiGusetBasic Affected: 16.03.08.15 |
| CVE-2022-40075 | 7.5 | Sep 19 | Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, form_fast_setting_wifi_set Affected: 16.03.08.15 |
| CVE-2022-40074 | 7.5 | Sep 19 | Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, setSchedWifi Affected: 16.03.08.15 |
| CVE-2022-40073 | 7.5 | Sep 19 | Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, saveParentControlInfo Affected: 16.03.08.15 |
| CVE-2022-40072 | 7.5 | Sep 19 | Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: setSmartPowerManagement Affected: 16.03.08.15 |
| CVE-2022-40071 | 7.5 | Sep 19 | Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, formSetDeviceName Affected: 16.03.08.15 |
| CVE-2022-40070 | 7.5 | Sep 19 | Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via bin/httpd, function: formSetFirewallCfg Affected: 16.03.08.15 |
| CVE-2022-40069 | 7.5 | Sep 19 | ]Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: fromSetSysTime Affected: 16.03.08.15 |
| CVE-2022-40068 | 7.5 | Sep 19 | Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: formSetQosBand Affected: 16.03.08.15 |
| CVE-2022-40067 | 7.5 | Sep 19 | Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: formSetVirtualSer Affected: 16.03.08.15 |
| CVE-2026-2147 | 5.3 | Feb 8 | Tenda AC21 Web Management DownloadLog information disclosure Affected: 16.03.08.16 |
| CVE-2025-65222 | 4.3 | Nov 20 | Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the rebootTime parameter of /goform/SetSysAutoRebbotCfg Affected: 16.03.08.16 |
| CVE-2025-65223 | 4.3 | Nov 20 | Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the urls parameter of /goform/saveParentControlInfo Affected: 16.03.08.16 |
| CVE-2025-65220 | 4.3 | Nov 20 | Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow in: /goform/SetVirtualServerCfg via the list parameter Affected: 16.03.08.16 |
| CVE-2025-65221 | 4.3 | Nov 20 | Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the list parameter of /goform/setPptpUserList Affected: 16.03.08.16 |
| CVE-2025-65226 | 4.3 | Nov 20 | Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the deviceId parameter in /goform/saveParentControlInfo Affected: 16.03.08.16 |
Showing 29
