364 matches found
Tenda W20E Router Arbitrary Command Execution
The vulnerability of the gstruleQos function goform/guestWifiRuleRefresh in the Tenda W20E router microprogramming software is related to the execution of operations outside the buffer in the gstup and gstdwn parameters’ memory. Exploiting this vulnerability allows a remote attacker to execute...
Tenda FormIPMacBindAdd DoS
The vulnerability of the formIPMacBindAdd function in the HTTP Handler component of the wireless Wi-Fi routers from Tenda, the Tenda W20E, is related to the issue where the operation is executed outside the buffer in memory when processing the IPMacBindRule parameter. Exploiting this vulnerabilit...
Tenda W20E formDelWebAuthWhiteUser Data Compromise
The vulnerability of the formDelWebAuthWhiteUser function in the wireless Wi-Fi router software Tenda W20E is related to the operation of the webAuthWhiteUserIndex parameter that goes beyond the buffer in memory. Exploiting this vulnerability allows an attacker to compromise the confidentiality,...
CVE-2026-90688
A vulnerability was identified in Tenda W20E 15.11.0.610681546841CNTDC. This issue affects the function formIPMacBindAdd of the component HTTP Handler. Such manipulation of the argument IPMacBindRule leads to stack-based buffer overflow. It is possible to launch the attack remotely...
CVE-2026-90689
A security flaw has been discovered in Tenda W20E 15.11.0.610681546841CNTDC. Impacted is the function formDelWebAuthWhiteUser. Performing a manipulation of the argument webAuthWhiteUserIndex results in stack-based buffer overflow. The attack can be initiated remotely...
CVE-2026-90689 Tenda W20E formDelWebAuthWhiteUser stack-based overflow
A security flaw has been discovered in Tenda W20E 15.11.0.610681546841CNTDC. Impacted is the function formDelWebAuthWhiteUser. Performing a manipulation of the argument webAuthWhiteUserIndex results in stack-based buffer overflow. The attack can be initiated remotely...
CVE-2026-90689
A stack-based buffer overflow vulnerability exists in the Tenda W20E wireless router, specifically in the formDelWebAuthWhiteUser function within firmware version 15.11.0.61068_1546_841_CN_TDC . By manipulating the webAuthWhiteUserIndex argument, an authenticated remote attacker can trigger the o...
EUVD-2026-77311
A security flaw has been discovered in Tenda W20E 15.11.0.610681546841CNTDC. Impacted is the function formDelWebAuthWhiteUser. Performing a manipulation of the argument webAuthWhiteUserIndex results in stack-based buffer overflow. The attack can be initiated remotely...
CVE-2026-90689 Tenda W20E formDelWebAuthWhiteUser stack-based overflow
A security flaw has been discovered in Tenda W20E 15.11.0.610681546841CNTDC. Impacted is the function formDelWebAuthWhiteUser. Performing a manipulation of the argument webAuthWhiteUserIndex results in stack-based buffer overflow. The attack can be initiated remotely...
CVE-2026-90688
Tenda W20E (version 15.11.0.61068_1546_841_CN_TDC ) is affected by a stack-based buffer overflow in the function formIPMacBindAdd within the HTTP Handler component. Manipulating the IPMacBindRule argument triggers the overflow. The vulnerability is exploitable remotely with low privileges and no ...
EUVD-2026-77306
A vulnerability was identified in Tenda W20E 15.11.0.610681546841CNTDC. This issue affects the function formIPMacBindAdd of the component HTTP Handler. Such manipulation of the argument IPMacBindRule leads to stack-based buffer overflow. It is possible to launch the attack remotely...
CVE-2026-90688 Tenda W20E HTTP formIPMacBindAdd stack-based overflow
A vulnerability was identified in Tenda W20E 15.11.0.610681546841CNTDC. This issue affects the function formIPMacBindAdd of the component HTTP Handler. Such manipulation of the argument IPMacBindRule leads to stack-based buffer overflow. It is possible to launch the attack remotely...
CVE-2026-90688 Tenda W20E HTTP formIPMacBindAdd stack-based overflow
A vulnerability was identified in Tenda W20E 15.11.0.610681546841CNTDC. This issue affects the function formIPMacBindAdd of the component HTTP Handler. Such manipulation of the argument IPMacBindRule leads to stack-based buffer overflow. It is possible to launch the attack remotely...
CVE-2026-90688: Stack-based Buffer Overflow
A vulnerability was identified in Tenda W20E 15.11.0.610681546841CNTDC. This issue affects the function formIPMacBindAdd of the component HTTP Handler. Such manipulation of the argument IPMacBindRule leads to stack-based buffer overflow. It is possible to launch the attack remotely...
CVE-2026-90689: Stack-based Buffer Overflow
A security flaw has been discovered in Tenda W20E 15.11.0.610681546841CNTDC. Impacted is the function formDelWebAuthWhiteUser. Performing a manipulation of the argument webAuthWhiteUserIndex results in stack-based buffer overflow. The attack can be initiated remotely...
PT-2026-91107
A security flaw has been discovered in Tenda W20E 15.11.0.61068 1546 841 CN TDC. Impacted is the function formDelWebAuthWhiteUser. Performing a manipulation of the argument webAuthWhiteUserIndex results in stack-based buffer overflow. The attack can be initiated remotely...
CVE-2026-67966
Tenda W20E V16.01.0.62782 /goform/telnet endpoint allows unauthenticated remote attackers to activate the Telnet daemon and obtain root shell access...
CVE-2026-67967
Buffer Overflow vulnerability in Tenda W20E V16.01.0.62782 allows an attacker to execute arbitrary code. This is an incomplete fix for CVE-2025-44867 and CVE-2026-36819...
CVE-2026-67967
A stack-based buffer overflow and command injection vulnerability exists in the Tenda W20E V5.0 wireless router running firmware US_W20EV5.0qu_V16.01.0.6(2782)_CN&EN_TDE01.bin. The flaw occurs in the /goform/module API, where the setDhcpStaticBindList.bindMACAddr handler uses strcpy() without len...