CVE-2021-45391: Tenda AX12 Firmware

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

A Buffer Overflow vulnerability exists in Tenda Router AX12 V22.03.01.21_CN in the sub_422CE4 function in the goform/setIPv6Status binary file /usr/sbin/httpd via the conType parameter, which causes a Denial of Service.

Affected products

• Tenda AX12 Firmware: version 22.03.01.21_cn only

Published 2022-02-16. Last modified 2026-06-17.