Tenda W20E vulnerabilities

31 vulnerabilities

Known vulnerabilities in Tenda W20E, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.3MediumCVE-2025-44866tenda · w20e_firmwaretenda w20e_firmwareTenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetDebugCfg function via the level parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.EPSS1.17%6.3MediumCVE-2025-44867tenda · w20e_firmwaretenda w20e_firmwareTenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetNetCheckTools function via the hostName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.EPSS1.18%6.3MediumCVE-2025-44864tenda · w20e_firmwaretenda w20e_firmwareTenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetDebugCfg function via the module parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.EPSS1.17%6.3MediumCVE-2025-44865tenda · w20e_firmwaretenda w20e_firmwareTenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetDebugCfg function via the enable parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.EPSS1.17%9.8CriticalCVE-2022-40868tenda · w20e_firmwaretenda w20e_firmwareTenda W20E router V15.11.0.6 (US_W20EV4.0br_V15.11.0.6(1068_1546_841)_CN_TDC) contains a stack overflow vulnerability in the function formDelDhcpRule with the request /goform/delDhcpRules/EPSS1.17%9.8CriticalCVE-2022-40867tenda · w20e_firmwaretenda w20e_firmwareTenda W20E router V15.11.0.6 (US_W20EV4.0br_V15.11.0.6(1068_1546_841)_CN_TDC) contains a stack overflow vulnerability in the function formIPMacBindDel with the request /goform/delIpMacBind/EPSS1.17%9.8CriticalCVE-2022-40855tenda · w20e_firmwaretenda w20e_firmwareTenda W20E router V15.11.0.6 contains a stack overflow in the function formSetPortMapping with post request 'goform/setPortMapping/'. This vulnerability allows attackers to cause a Denial of Service (DoS) or Remote Code Execution (RCE) via the portMappingServer, portMappingProtocol, portMappingWan, porMappingtInternal, and portMappingExternal parameters.EPSS14.07%9.8CriticalCVE-2022-40866tenda · w20e_firmwaretenda w20e_firmwareTenda W20E router V15.11.0.6 (US_W20EV4.0br_V15.11.0.6(1068_1546_841)_CN_TDC) contains a stack overflow vulnerability in the function formSetDebugCfg with request /goform/setDebugCfg/EPSS1.17%9.8CriticalCVE-2022-48130tenda · w20e_firmwaretenda w20e_firmwareTenda W20E v15.11.0.6 was discovered to contain multiple stack overflows in the function formSetStaticRoute via the parameters staticRouteNet, staticRouteMask, staticRouteGateway, staticRouteWAN.EPSS0.93%7.2HighCVE-2022-45996tenda · w20e_firmwaretenda w20e_firmwareTenda W20E V16.01.0.6(3392) is vulnerable to Command injection via cmd_get_ping_output.EPSS2.30%7.2HighCVE-2022-45997tenda · w20e_firmwaretenda w20e_firmwareTenda W20E V16.01.0.6(3392) is vulnerable to Buffer Overflow.EPSS0.94%9CriticalCVE-2024-3874tenda · w20e_firmwareTenda W20E SetRemoteWebManage formSetRemoteWebManage stack-based overflowA vulnerability was found in Tenda W20E 15.11.0.6. It has been declared as critical. This vulnerability affects the function formSetRemoteWebManage of the file /goform/SetRemoteWebManage. The manipulation of the argument remoteIP leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-260908. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.EPSS1.31%9CriticalCVE-2026-19824tenda · w20e_firmwareTenda W20E addIpMacBind ipMacBindListStore stack-based overflowA weakness has been identified in Tenda W20E 15.11.0.6(1068_1546_841)_CN_TDC. The affected element is the function ipMacBindListStore of the file /goform/addIpMacBind. Executing a manipulation of the argument IPMacBindRule can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.EPSS0.85%9CriticalCVE-2026-19823tenda · w20e_firmwareTenda W20E QoS Rule Deletion delQos formQOSRuleDel stack-based overflowA security flaw has been discovered in Tenda W20E 15.11.0.6(1068_1546_841)_CN_TDC. Impacted is the function formQOSRuleDel of the file /goform/delQos of the component QoS Rule Deletion. Performing a manipulation of the argument qosIndex results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.EPSS0.85%9CriticalCVE-2026-19822tenda · w20e_firmwareTenda W20E QoS Edit editQos lstAdd stack-based overflowA vulnerability was identified in Tenda W20E 15.11.0.6(1068_1546_841)_CN_TDC. This issue affects the function lstAdd of the file /goform/editQos of the component QoS Edit. Such manipulation of the argument qosListConnecttedNum leads to stack-based buffer overflow. The attack may be launched remotely. The exploit is publicly available and might be used.EPSS0.85%9CriticalCVE-2026-11524tenda · w20e_firmwareTenda W20E Web Management modifyWifiFilterRules stack-based overflowA vulnerability has been found in Tenda W20E 15.11.0.6. Impacted is the function modifyWifiFilterRules of the file /goform/modifyWifiFilterRules of the component Web Management Interface. The manipulation of the argument wifiFilterListRemark leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.EPSS0.47%9CriticalCVE-2026-11523tenda · w20e_firmwareTenda W20E Web Management PortalAuth formPortalAuth stack-based overflowA flaw has been found in Tenda W20E 15.11.0.6. This issue affects the function formPortalAuth of the file /goform/PortalAuth of the component Web Management Interface. Executing a manipulation of the argument gotoUrl can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been published and may be used.EPSS0.47%9CriticalCVE-2026-11522tenda · w20e_firmwareTenda W20E setPortMirror formSetPortMirror stack-based overflowA vulnerability was detected in Tenda W20E 15.11.0.6. This vulnerability affects the function formSetPortMirror of the file /goform/setPortMirror. Performing a manipulation of the argument portMirrorMirroredPorts results in stack-based buffer overflow. The attack can be initiated remotely. The exploit is now public and may be used.EPSS0.47%7.1HighCVE-2026-90688tenda · w20e_firmwareTenda W20E HTTP formIPMacBindAdd stack-based overflowA vulnerability was identified in Tenda W20E 15.11.0.61068_1546_841_CN_TDC. This issue affects the function formIPMacBindAdd of the component HTTP Handler. Such manipulation of the argument IPMacBindRule leads to stack-based buffer overflow. It is possible to launch the attack remotely.EPSS0.71%9CriticalCVE-2026-90689tenda · w20e_firmwareTenda W20E formDelWebAuthWhiteUser stack-based overflowA security flaw has been discovered in Tenda W20E 15.11.0.61068_1546_841_CN_TDC. Impacted is the function formDelWebAuthWhiteUser. Performing a manipulation of the argument webAuthWhiteUserIndex results in stack-based buffer overflow. The attack can be initiated remotely.EPSS0.85%