Vulnerability Description
A vulnerability was identified in Tenda AC21 16.03.08.16. This vulnerability affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg. The manipulation of the argument startIp leads to buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Tenda | Ac21 Firmware | 16.03.08.16 |
| Tenda | Ac21 | 1.0 |
Related Weaknesses (CWE)
References
- https://github.com/LX-LX88/cve/issues/10ExploitIssue TrackingThird Party Advisory
- https://vuldb.com/?ctiid.330906Permissions RequiredVDB Entry
- https://vuldb.com/?id.330906Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.678491Third Party AdvisoryVDB Entry
- https://www.tenda.com.cn/Product
FAQ
What is CVE-2025-12611?
CVE-2025-12611 is a vulnerability with a CVSS score of 8.8 (HIGH). A vulnerability was identified in Tenda AC21 16.03.08.16. This vulnerability affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg. The manipulation of the argument startIp leads...
How severe is CVE-2025-12611?
CVE-2025-12611 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-12611?
Check the references section above for vendor advisories and patch information. Affected products include: Tenda Ac21 Firmware, Tenda Ac21.