W20e Firmware

CVE-2026-24112 Mar 02, 16:16 CRITICAL POC Act Now

Tenda W20E has a ninth buffer overflow in yet another CGI endpoint.

CVE-2026-24110 Mar 02, 16:16 CRITICAL POC Act Now

Tenda W20E has an eighth buffer overflow in addDhcpRules parameter.

CVE-2026-24115 Mar 02, 15:16 CRITICAL POC Act Now

Tenda W20E has a seventh buffer overflow in gstup parameter handling.

CVE-2026-24114 Mar 02, 15:16 CRITICAL POC Act Now

Tenda W20E has a sixth buffer overflow in pPortMapIndex parameter validation.

CVE-2026-24113 Mar 02, 15:16 CRITICAL POC Act Now

Tenda W20E has a fifth buffer overflow.

CVE-2026-24111 Mar 02, 15:16 CRITICAL POC Act Now

Tenda W20E has a fourth buffer overflow vulnerability.

CVE-2026-24109 Mar 02, 15:16 CRITICAL POC Act Now

Tenda W20E has a third buffer overflow in a different CGI parameter.

CVE-2026-24108 Mar 02, 15:16 CRITICAL POC Act Now

Tenda W20E has a buffer overflow — second of eight critical vulnerabilities in this router firmware.

CVE-2026-24107 Mar 02, 15:16 CRITICAL POC Act Now

Tenda W20E router has a code injection vulnerability in usbPartitionName parameter allowing unauthenticated remote code execution with EPSS 1.1%.

CVE-2025-44867 May 01, 18:15 MEDIUM POC THREAT This Month

Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetNetCheckTools function via the hostName parameter. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 12.5%.

CVE-2025-44866 May 01, 18:15 MEDIUM POC THREAT This Month

Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetDebugCfg function via the level parameter. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 12.5%.

CVE-2025-44865 May 01, 18:15 MEDIUM POC THREAT This Month

Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetDebugCfg function via the enable parameter. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 12.5%.

CVE-2025-44864 May 01, 18:15 MEDIUM POC THREAT This Month

Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetDebugCfg function via the module parameter. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 12.5%.

CVE-2024-3874 Apr 16, 16:15 HIGH This Week

A vulnerability was found in Tenda W20E 15.11.0.6. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2023-26806 Mar 19, 01:15 CRITICAL POC Act Now

Tenda W20E v15.11.0.6(US_W20EV4.0br_v15.11.0.6(1068_1546_841 is vulnerable to Buffer Overflow via function formSetSysTime,. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-26805 Mar 19, 01:15 CRITICAL POC Act Now

Tenda W20E v15.11.0.6 (US_W20EV4.0br_v15.11.0.6(1068_1546_841)_CN_TDC) is vulnerable to Buffer Overflow via function formIPMacBindModify. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2022-45997 Dec 12, 16:15 HIGH POC This Week

Tenda W20E V16.01.0.6(3392) is vulnerable to Buffer Overflow. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2022-45996 Dec 12, 16:15 HIGH POC This Week

Tenda W20E V16.01.0.6(3392) is vulnerable to Command injection via cmd_get_ping_output. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2022-40868 Sep 23, 15:15 CRITICAL POC Act Now

Tenda W20E router V15.11.0.6 (US_W20EV4.0br_V15.11.0.6(1068_1546_841)_CN_TDC) contains a stack overflow vulnerability in the function formDelDhcpRule with the request /goform/delDhcpRules/. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2022-40867 Sep 23, 15:15 CRITICAL POC Act Now

Tenda W20E router V15.11.0.6 (US_W20EV4.0br_V15.11.0.6(1068_1546_841)_CN_TDC) contains a stack overflow vulnerability in the function formIPMacBindDel with the request /goform/delIpMacBind/. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2022-40866 Sep 23, 15:15 CRITICAL POC Act Now

Tenda W20E router V15.11.0.6 (US_W20EV4.0br_V15.11.0.6(1068_1546_841)_CN_TDC) contains a stack overflow vulnerability in the function formSetDebugCfg with request /goform/setDebugCfg/. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2022-40855 Sep 23, 15:15 CRITICAL POC THREAT Act Now

Tenda W20E router V15.11.0.6 contains a stack overflow in the function formSetPortMapping with post request 'goform/setPortMapping/'. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.