Security Advisory
CVE-2025-12611
8.8
HIGH
Vulnerability Description
A vulnerability was identified in Tenda AC21 16.03.08.16. This vulnerability affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg. The manipulation of the argument startIp leads to buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.
Published Date
November 3, 2025
Official Source
NIST NVD Advisory