Tenda AC21 router firmware version V16.03.08.16 contains a buffer overflow vulnerability in the /goform/SetVirtualServerCfg endpoint via the list parameter. This flaw can cause denial of service due to application crash but does not impact confidentiality or integrity. The vulnerability has a medium severity rating with a CVSS score of 4.3.