Tenda W20e Firmware 15.11.0.6
Approved changes feed: RSS · Atom
cpe:2.3:o:tenda:w20e_firmware:15.11.0.6:*:*:*:*:*:*:*
part: o version: 15.11.0.6 update: *
| Vendor | Tenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42) |
|---|---|
| Product | W20E Firmware (615bcc5c-2854-5361-b87f-c02ae4a0ef30) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-24115 |
vulnerable | 2026-06-08 07:51:17.150751 |
Details available
An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Failure to validate the sizes of `gstup` and `gstdwn` before concatenating them into `gstruleQos` may lead to buffer overflow.
Published: 2026-03-02T00:00:00.000Z
Updated: 2026-03-03T20:35:56.228Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24114 |
vulnerable | 2026-06-08 07:51:17.150290 |
Details available
An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Failure to validate `pPortMapIndex` may lead to buffer overflows when using `strcpy`.
Published: 2026-03-02T00:00:00.000Z
Updated: 2026-03-03T20:09:41.101Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24113 |
vulnerable | 2026-06-08 07:51:17.149858 |
Details available
An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by controlling the value of `nptr`. When this value is passed into the `getMibPrefix` function and concatenated using `sprintf` without proper size validation, it could lead to a buffer overflow vulnerability.
Published: 2026-03-02T00:00:00.000Z
Updated: 2026-03-05T15:54:30.496Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24112 |
vulnerable | 2026-06-08 07:51:17.149383 |
Details available
An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by specifying the value of `userInfo`. When `userInfo` is passed into the `addWewifiWhiteUser` function and processed by `sscanf` without size validation, it could lead to a buffer overflow vulnerability.
Published: 2026-03-02T00:00:00.000Z
Updated: 2026-03-03T20:09:05.330Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24111 |
vulnerable | 2026-06-08 07:51:17.148835 |
Details available
An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by specifying the value of `userInfo`. When `userInfo` is passed into the `addAuthUser` function and processed by `sscanf` without size validation, it could lead to buffer overflow.
Published: 2026-03-02T00:00:00.000Z
Updated: 2026-03-05T15:56:42.518Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24110 |
vulnerable | 2026-06-08 07:51:17.148258 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24109 |
vulnerable | 2026-06-08 07:51:17.147747 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24108 |
vulnerable | 2026-06-08 07:51:17.147227 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24107 |
vulnerable | 2026-06-08 07:51:17.142203 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-44867 |
vulnerable | 2026-06-08 07:25:10.754557 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-44866 |
vulnerable | 2026-06-08 07:25:10.754170 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-44865 |
vulnerable | 2026-06-08 07:25:10.753862 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-44864 |
vulnerable | 2026-06-08 07:25:10.752533 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3874 |
vulnerable | 2026-06-08 06:43:51.724072 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-26806 |
vulnerable | 2026-06-08 05:57:40.373880 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-26805 |
vulnerable | 2026-06-08 05:57:40.372180 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-48130 |
vulnerable | 2026-06-08 05:50:41.222125 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40868 |
vulnerable | 2026-06-08 05:48:28.259652 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40867 |
vulnerable | 2026-06-08 05:48:28.259270 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40866 |
vulnerable | 2026-06-08 05:48:28.258865 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40855 |
vulnerable | 2026-06-08 05:48:28.251816 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.