W20e Firmware CVE-2026-24110
CRITICALCVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
3DescriptionNVD
An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may send overly long addDhcpRules data. When these rules enter the addDhcpRule function and are processed by ret = sscanf(pRule, " %d\t%[^\t]\t%[^\n\r\t]", &dhcpsIndex, dhcpsIP, dhcpsMac);, the lack of size validation for the rules could lead to buffer overflows in dhcpsIndex, dhcpsIP, and dhcpsMac.
AnalysisAI
Tenda W20E has an eighth buffer overflow in addDhcpRules parameter.
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: inventory all Tenda W20E V4.0br devices in your network and isolate them to a restricted management VLAN. Within 7 days: implement network segmentation to limit access to affected devices and disable DHCP rule management features if operationally feasible, or apply WAF/IDS signatures to block malformed addDhcpRules requests. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today