CNNVD-202509-3737 Information

CNNVD ID

CNNVD-202509-3737

CVE-2025-10838

  • CNNVD Published: 2025-09-23

Description (Chinese)

Tenda AC21是中国腾达(Tenda)公司的一款无线路由器。 Tenda AC21 16.03.08.16版本存在安全漏洞,该漏洞源于文件/goform/WifiExtraSet中函数sub_45BB10对参数wpapsk_crypto的错误操作,可能导致缓冲区溢出。

Description (English)

Tenda AC21 is a wireless router of Tenda China. There is a security loophole in version Tenda AC21 16.03.08.16, which stems from the error in the function sub 45BB10 against parameter Wpapsk crypto in file/goform/WifiExtraSet, which may result in a spilling of the buffer zone.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

腾达

Published

2025-09-23

Last Modified

2026-02-24

References

https://github.com/lin-3-start/lin-cve/blob/main/Tenda%20AC21/Tenda%20AC21%20Buffer%20overflow.md https://github.com/lin-3-start/lin-cve/blob/main/Tenda%20AC21/Tenda%20AC21%20Buffer%20overflow.md#poc https://vuldb.com/?ctiid.325200 https://vuldb.com/?id.325200 https://vuldb.com/?submit.657126 https://www.tenda.com.cn/

Share on: