BaseFortify

Publication date: 2025-11-20

Last updated on: 2026-02-24

Assigner: VulDB

Description

A flaw has been found in Tenda AC21 16.03.08.16. This affects an unknown part of the file /goform/SetIpMacBind. Executing a manipulation of the argument list can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been published and may be used.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-20

Last Modified

2026-02-24

Generated

2026-07-07

AI Q&A

2025-11-20

EPSS Evaluated

2026-07-05

NVD

CVE-2025-13445

Affected Vendors & Products

Vendor	Product	Version / Range
tenda	ac21_firmware	16.03.08.16
tenda	ac21	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
CWE-119	The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Attack-Flow Graph

Executive Summary

This vulnerability is a stack-based buffer overflow found in the Tenda AC21 firmware version 16.03.08.16, specifically in an unknown part of the /goform/SetIpMacBind file. By manipulating the argument list remotely, an attacker can trigger this overflow, potentially leading to arbitrary code execution or system compromise. The exploit for this vulnerability has been published and is available for use.

Impact Analysis

This vulnerability can allow a remote attacker to execute arbitrary code or cause a denial of service on the affected device by exploiting the stack-based buffer overflow. This can lead to unauthorized access, disruption of network services, or compromise of the device's integrity and availability.

Hi! I’m here to help you understand CVE-2025-13445. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70