Tenda W20E Multiple Buffer Overflow Vulnerabilities

Tenda W20E router has a code injection vulnerability in usbPartitionName parameter allowing unauthenticated remote code execution with EPSS 1.1%.

Tenda W20E has a third buffer overflow in a different CGI parameter.

Tenda W20E has a fourth buffer overflow vulnerability.

Tenda W20E has a buffer overflow — second of eight critical vulnerabilities in this router firmware.

Tenda W20E has a fifth buffer overflow.

Tenda W20E has a sixth buffer overflow in pPortMapIndex parameter validation.

Tenda W20E has a seventh buffer overflow in gstup parameter handling.