Unrated severityNVD Advisory· Published Nov 20, 2025· Updated Feb 24, 2026

Tenda AC21 SetSysTimeCfg stack-based overflow

CVE-2025-13446

Description

A vulnerability has been found in Tenda AC21 16.03.08.16. This vulnerability affects unknown code of the file /goform/SetSysTimeCfg. The manipulation of the argument timeZone/time leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Tenda/Ac21 Firmwarev5
cpe:2.3:o:tenda:ac21_firmware:*:*:*:*:*:*:*:*
Range: 16.03.08.16
Tenda/AC21llm-fuzzy
Range: = 16.03.08.16

Patches

Vulnerability mechanics

References

github.com/Madgeaaaaa/MY_VULN_2/blob/main/Tenda/VULN9.mdmitreexploit
vuldb.commitrethird-party-advisory
vuldb.commitrethird-party-advisory
github.com/Madgeaaaaa/MY_VULN_2/blob/main/Tenda/VULN8.mdmitrerelated
vuldb.commitresignaturepermissions-required
vuldb.commitrevdb-entrytechnical-description
www.tenda.com.cnmitreproduct

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000