Skip to main content

W20e Firmware CVE-2023-26806

CRITICAL
Out-of-bounds Write (CWE-787)
2023-03-19 cve@mitre.org
Memory Corruption Buffer Overflow Tenda W20e Firmware
9.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
9.8 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Mar 19, 2023 - 01:15 nvd
CRITICAL 9.8

DescriptionNVD

Tenda W20E v15.11.0.6(US_W20EV4.0br_v15.11.0.6(1068_1546_841 is vulnerable to Buffer Overflow via function formSetSysTime,

AnalysisAI

Tenda W20E v15.11.0.6(US_W20EV4.0br_v15.11.0.6(1068_1546_841 is vulnerable to Buffer Overflow via function formSetSysTime,. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified as Out-of-bounds Write (CWE-787), which allows attackers to write data beyond allocated buffer boundaries leading to code execution or crashes. Tenda W20E v15.11.0.6(US_W20EV4.0br_v15.11.0.6(1068_1546_841 is vulnerable to Buffer Overflow via function formSetSysTime, Affected products include: Tenda W20E Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Validate write boundaries, use memory-safe languages, enable compiler protections (ASLR, stack canaries).

More in W20e Firmware

View all
CVE-2026-24107 CRITICAL POC
9.8 Mar 02

Tenda W20E router has a code injection vulnerability in usbPartitionName parameter allowing unauthenticated remote code

CVE-2026-24112 CRITICAL POC
9.8 Mar 02

Tenda W20E has a ninth buffer overflow in yet another CGI endpoint.
CVE-2026-24110 CRITICAL POC
9.8 Mar 02

Tenda W20E has an eighth buffer overflow in addDhcpRules parameter.
CVE-2026-24115 CRITICAL POC
9.8 Mar 02

Tenda W20E has a seventh buffer overflow in gstup parameter handling.
CVE-2026-24114 CRITICAL POC
9.8 Mar 02

Tenda W20E has a sixth buffer overflow in pPortMapIndex parameter validation.
CVE-2026-24113 CRITICAL POC
9.8 Mar 02

Tenda W20E has a fifth buffer overflow.
CVE-2026-24111 CRITICAL POC
9.8 Mar 02

Tenda W20E has a fourth buffer overflow vulnerability.
CVE-2026-24109 CRITICAL POC
9.8 Mar 02

Tenda W20E has a third buffer overflow in a different CGI parameter.
CVE-2026-24108 CRITICAL POC
9.8 Mar 02

Tenda W20E has a buffer overflow — second of eight critical vulnerabilities in this router firmware.
CVE-2023-26805 CRITICAL POC
9.8 Mar 19

Tenda W20E v15.11.0.6 (US_W20EV4.0br_v15.11.0.6(1068_1546_841)_CN_TDC) is vulnerable to Buffer Overflow via function for
CVE-2022-40868 CRITICAL POC
9.8 Sep 23

Tenda W20E router V15.11.0.6 (US_W20EV4.0br_V15.11.0.6(1068_1546_841)_CN_TDC) contains a stack overflow vulnerability in
CVE-2022-40867 CRITICAL POC
9.8 Sep 23

Tenda W20E router V15.11.0.6 (US_W20EV4.0br_V15.11.0.6(1068_1546_841)_CN_TDC) contains a stack overflow vulnerability in

Same weakness CWE-787 – Out-of-bounds Write

View all
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2012-1889 HIGH POC
8.8
CVE-2010-3333 HIGH POC
7.8
CVE-2014-1761 HIGH POC
7.8
CVE-2009-3129 HIGH POC
7.8
CVE-2021-1732 HIGH POC
7.8
CVE-2013-3346 CRITICAL POC
9.8

Same technique Memory Corruption

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2014-0322 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-4792 HIGH POC
8.8
CVE-2010-3333 HIGH POC
7.8

Share

CVE-2023-26806 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy