CVE-2025-11091: Tenda AC21 SetStaticRouteCfg sscanf buffer overflow
A security flaw has been discovered in Tenda AC21 up to 16.03.08.16. Affected by this vulnerability is the function sscanf of the file /goform/SetStaticRouteCfg. The manipulation of the argument list results in buffer overflow. The attack can be launched remotely. The exploit has been released to the public and may be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11091?
CVE-2025-11091 is classified as a high-severity vulnerability due to its potential for remote exploitation through a buffer overflow.
How do I fix CVE-2025-11091?
To fix CVE-2025-11091, upgrade the Tenda AC21 firmware to a version beyond 16.03.08.16.
What systems are affected by CVE-2025-11091?
CVE-2025-11091 affects Tenda AC21 devices running firmware versions up to and including 16.03.08.16.
Can CVE-2025-11091 be exploited remotely?
Yes, CVE-2025-11091 can be exploited remotely, allowing attackers to execute malicious code on vulnerable devices.
What kind of attack can CVE-2025-11091 facilitate?
CVE-2025-11091 can facilitate a buffer overflow attack, which may lead to arbitrary code execution on the affected devices.