ID
VAR-202511-2233
CVE
CVE-2025-13445
TITLE
Shenzhen Tenda Technology Co.,Ltd. of ac21 Buffer error vulnerability in firmware
Trust: 0.8
DESCRIPTION
A flaw has been found in Tenda AC21 16.03.08.16. This affects an unknown part of the file /goform/SetIpMacBind. Executing manipulation of the argument list can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been published and may be used. Shenzhen Tenda Technology Co.,Ltd. of ac21 The firmware contains a buffer error vulnerability and a stack-based buffer overflow vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. The Tenda AC21 is a dual-band gigabit wireless router from Tenda Technology, designed for high-speed home internet needs. It supports 802.11ac wave2 technology, with a dual-band concurrent speed of up to 2033Mbps, including 1733Mbps on the 5GHz band, meeting the demands of high-bandwidth applications such as 4K video and live streaming. This vulnerability stems from the `/goform/SetIpMacBind` file's parameter `list` failing to properly validate the length of input data. Attackers could exploit this vulnerability to execute arbitrary code or cause a denial-of-service attack
Trust: 2.16
IOT TAXONOMY
| category: | ['Network device'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | tenda | model: | ac21 | scope: | eq | version: | 16.03.08.16 | Trust: 1.0 |
| vendor: | tenda | model: | ac21 | scope: | eq | version: | ac21 firmware 16.03.08.16 | Trust: 0.8 |
| vendor: | tenda | model: | ac21 | scope: | eq | version: | - | Trust: 0.8 |
| vendor: | tenda | model: | ac21 | scope: | - | version: | - | Trust: 0.8 |
| vendor: | tenda | model: | ac21 | scope: | eq | version: | v16.03.08.16 | Trust: 0.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-119 | Trust: 1.0 |
| problemtype: | CWE-121 | Trust: 1.0 |
| problemtype: | Buffer error (CWE-119) [ others ] | Trust: 0.8 |
| problemtype: | Stack-based buffer overflow (CWE-121) [ others ] | Trust: 0.8 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2025-13445 | Trust: 3.2 |
| db: | VULDB | id: | 333017 | Trust: 1.8 |
| db: | JVNDB | id: | JVNDB-2025-019938 | Trust: 0.8 |
| db: | CNVD | id: | CNVD-2025-29428 | Trust: 0.6 |
REFERENCES
| url: | https://github.com/madgeaaaaa/my_vuln_2/blob/main/tenda/vuln7.md | Trust: 2.4 |
| url: | https://vuldb.com/?id.333017 | Trust: 1.8 |
| url: | https://vuldb.com/?submit.694066 | Trust: 1.8 |
| url: | https://www.tenda.com.cn/ | Trust: 1.8 |
| url: | https://vuldb.com/?ctiid.333017 | Trust: 1.0 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2025-13445 | Trust: 0.8 |
SOURCES
| db: | CNVD | id: | CNVD-2025-29428 |
| db: | JVNDB | id: | JVNDB-2025-019938 |
| db: | NVD | id: | CVE-2025-13445 |
LAST UPDATE DATE
2025-11-28T04:20:23.513000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2025-29428 | date: | 2025-11-27T00:00:00 |
| db: | JVNDB | id: | JVNDB-2025-019938 | date: | 2025-11-26T02:18:00 |
| db: | NVD | id: | CVE-2025-13445 | date: | 2025-11-21T20:19:44.090 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2025-29428 | date: | 2025-11-26T00:00:00 |
| db: | JVNDB | id: | JVNDB-2025-019938 | date: | 2025-11-26T00:00:00 |
| db: | NVD | id: | CVE-2025-13445 | date: | 2025-11-20T15:17:25.480 |