CVE-2025-10838: Tenda AC21 WifiExtraSet sub_45BB10 buffer overflow
A vulnerability was identified in Tenda AC21 16.03.08.16. The affected element is the function sub45BB10 of the file /goform/WifiExtraSet. The manipulation of the argument wpapskcrypto leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10838?
The severity of CVE-2025-10838 is considered high due to the potential for remote exploitation via buffer overflow.
How do I fix CVE-2025-10838?
To fix CVE-2025-10838, update the Tenda AC21 firmware to the latest version provided by the manufacturer.
What type of vulnerability is CVE-2025-10838?
CVE-2025-10838 is a buffer overflow vulnerability that affects the Tenda AC21 router.
Can CVE-2025-10838 be exploited remotely?
Yes, CVE-2025-10838 can be exploited remotely, allowing attackers to potentially execute arbitrary code.
Which devices are affected by CVE-2025-10838?
CVE-2025-10838 specifically affects the Tenda AC21 router running version 16.03.08.16.