Skip to main content

W20e Firmware CVE-2022-45997

HIGH
Classic Buffer Overflow (CWE-120)
2022-12-12 cve@mitre.org
Tenda Buffer Overflow W20e Firmware
7.2
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.2 HIGH
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Dec 12, 2022 - 16:15 nvd
HIGH 7.2

DescriptionNVD

Tenda W20E V16.01.0.6(3392) is vulnerable to Buffer Overflow.

AnalysisAI

Tenda W20E V16.01.0.6(3392) is vulnerable to Buffer Overflow. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified as Buffer Copy without Size Check (CWE-120), which allows attackers to overflow a buffer to corrupt adjacent memory. Tenda W20E V16.01.0.6(3392) is vulnerable to Buffer Overflow. Affected products include: Tenda W20E Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Always validate buffer sizes before copy operations. Use bounded functions (strncpy, snprintf). Enable compiler protections.

More in W20e Firmware

View all
CVE-2026-24107 CRITICAL POC
9.8 Mar 02

Tenda W20E router has a code injection vulnerability in usbPartitionName parameter allowing unauthenticated remote code

CVE-2026-24112 CRITICAL POC
9.8 Mar 02

Tenda W20E has a ninth buffer overflow in yet another CGI endpoint.
CVE-2026-24110 CRITICAL POC
9.8 Mar 02

Tenda W20E has an eighth buffer overflow in addDhcpRules parameter.
CVE-2026-24115 CRITICAL POC
9.8 Mar 02

Tenda W20E has a seventh buffer overflow in gstup parameter handling.
CVE-2026-24114 CRITICAL POC
9.8 Mar 02

Tenda W20E has a sixth buffer overflow in pPortMapIndex parameter validation.
CVE-2026-24113 CRITICAL POC
9.8 Mar 02

Tenda W20E has a fifth buffer overflow.
CVE-2026-24111 CRITICAL POC
9.8 Mar 02

Tenda W20E has a fourth buffer overflow vulnerability.
CVE-2026-24109 CRITICAL POC
9.8 Mar 02

Tenda W20E has a third buffer overflow in a different CGI parameter.
CVE-2026-24108 CRITICAL POC
9.8 Mar 02

Tenda W20E has a buffer overflow — second of eight critical vulnerabilities in this router firmware.
CVE-2023-26806 CRITICAL POC
9.8 Mar 19

Tenda W20E v15.11.0.6(US_W20EV4.0br_v15.11.0.6(1068_1546_841 is vulnerable to Buffer Overflow via function formSetSysTim
CVE-2023-26805 CRITICAL POC
9.8 Mar 19

Tenda W20E v15.11.0.6 (US_W20EV4.0br_v15.11.0.6(1068_1546_841)_CN_TDC) is vulnerable to Buffer Overflow via function for
CVE-2022-40868 CRITICAL POC
9.8 Sep 23

Tenda W20E router V15.11.0.6 (US_W20EV4.0br_V15.11.0.6(1068_1546_841)_CN_TDC) contains a stack overflow vulnerability in

Same weakness CWE-120 – Classic Buffer Overflow

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2016-10174 CRITICAL POC
9.8
CVE-2016-0099 HIGH POC
7.8
CVE-2016-6366 HIGH POC
8.8
CVE-2013-1331 HIGH
7.8
CVE-2013-0641 HIGH
7.8
CVE-2017-15222 CRITICAL POC
9.8
CVE-2012-2763 HIGH POC
7.5

Same technique Buffer Overflow

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2017-11882 HIGH POC
7.8
CVE-2010-3333 HIGH POC
7.8

Share

CVE-2022-45997 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy