Tenda W30E 2.0
Approved changes feed: RSS · Atom
cpe:2.3:h:tenda:w30e:2.0:*:*:*:*:*:*:*
part: h version: 2.0 update: *
| Vendor | Tenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42) |
|---|---|
| Product | W30E (2f57c851-bd50-5616-9a67-bdff50757d96) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-38835 |
not_vulnerable | 2026-06-08 08:01:16.120831 |
Details available
Tenda W30E V2.0 V16.01.0.21 was found to contain a command injection vulnerability in the formSetUSBPartitionUmount function via the usbPartitionName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Published: 2026-04-21T00:00:00.000Z
Updated: 2026-04-22T15:35:41.189Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-38834 |
not_vulnerable | 2026-06-08 08:01:16.120145 |
Details available
Tenda W30E V2.0 V16.01.0.21 was found to contain a command injection vulnerability in the do_ping_action function via the hostName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Published: 2026-04-21T00:00:00.000Z
Updated: 2026-04-21T19:23:17.157Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24440 |
not_vulnerable | 2026-06-08 07:51:17.678249 |
Tenda W30E V2 Allows Password Changes Without Verifying Current Password
Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) allow account passwords to be changed through the maintenance interface without requiring verification of the existing password. This enables unauthorized password changes when access to the affected endpoint is obtained.
Published: 2026-01-26T17:38:44.054Z
Updated: 2026-05-14T02:09:39.530Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24439 |
not_vulnerable | 2026-06-08 07:51:17.677807 |
Tenda W30E V2 Lacks X-Content-Type-Options Header
Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) fail to include the X-Content-Type-Options: nosniff response header on web management interfaces. As a result, browsers that perform MIME sniffing may incorrectly interpret attacker-influenced responses as executable script.
Published: 2026-01-26T17:48:37.336Z
Updated: 2026-05-14T02:09:38.739Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24437 |
not_vulnerable | 2026-06-08 07:51:17.677372 |
Tenda W30E V2 Missing Cache Controls for Credential-bearing Pages
Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) serve sensitive administrative content without appropriate cache-control directives. As a result, browsers may store credential-bearing responses locally, exposing them to subsequent unauthorized access.
Published: 2026-01-26T17:40:22.992Z
Updated: 2026-05-14T02:09:37.968Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24436 |
not_vulnerable | 2026-06-08 07:51:17.676870 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24435 |
not_vulnerable | 2026-06-08 07:51:17.676150 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24433 |
not_vulnerable | 2026-06-08 07:51:17.674988 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24431 |
not_vulnerable | 2026-06-08 07:51:17.671752 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24430 |
not_vulnerable | 2026-06-08 07:51:17.671411 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24428 |
not_vulnerable | 2026-06-08 07:51:17.669255 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-57087 |
not_vulnerable | 2026-06-08 07:33:15.785016 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-52789 |
not_vulnerable | 2026-06-08 06:52:16.235281 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.