CVE-2025-65220: Buffer Overflow
Published Nov 20, 2025
·Updated
Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow in: /goform/SetVirtualServerCfg via the list parameter.
Affected Software
3 affected components
Tenda AC21
All of the following
Tenda Ac21 Firmware=16.03.08.16
Tenda AC21
Event History
Nov 20, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·03:17 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-65220?
CVE-2025-65220 has a medium severity rating due to the potential for remote code execution via buffer overflow.
2
How do I fix CVE-2025-65220?
To fix CVE-2025-65220, update the Tenda AC21 firmware to the latest version that addresses this vulnerability.
3
What systems are affected by CVE-2025-65220?
The vulnerable system is the Tenda AC21 running firmware version V16.03.08.16.
4
What kind of attack can exploit CVE-2025-65220?
CVE-2025-65220 can be exploited through a buffer overflow attack initiated via the /goform/SetVirtualServerCfg endpoint.
5
Is there a workaround for CVE-2025-65220?
As a temporary workaround for CVE-2025-65220, users can restrict access to the vulnerable endpoint or disable remote management features.