Approved changes feed: RSS · Atom

cpe:2.3:h:tenda:w20e:4.0:*:*:*:*:*:*:*

part: h version: 4.0 update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductW20E (e8bba007-fe79-53ee-beca-d3eb975a4757)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-24115 not_vulnerable 2026-06-08 07:51:17.150872 Details available
An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Failure to validate the sizes of `gstup` and `gstdwn` before concatenating them into `gstruleQos` may lead to buffer overflow.
Published: 2026-03-02T00:00:00.000Z
Updated: 2026-03-03T20:35:56.228Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24114 not_vulnerable 2026-06-08 07:51:17.150310 Details available
An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Failure to validate `pPortMapIndex` may lead to buffer overflows when using `strcpy`.
Published: 2026-03-02T00:00:00.000Z
Updated: 2026-03-03T20:09:41.101Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24113 not_vulnerable 2026-06-08 07:51:17.149882 Details available
An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by controlling the value of `nptr`. When this value is passed into the `getMibPrefix` function and concatenated using `sprintf` without proper size validation, it could lead to a buffer overflow vulnerability.
Published: 2026-03-02T00:00:00.000Z
Updated: 2026-03-05T15:54:30.496Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24112 not_vulnerable 2026-06-08 07:51:17.149406 Details available
An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by specifying the value of `userInfo`. When `userInfo` is passed into the `addWewifiWhiteUser` function and processed by `sscanf` without size validation, it could lead to a buffer overflow vulnerability.
Published: 2026-03-02T00:00:00.000Z
Updated: 2026-03-03T20:09:05.330Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24111 not_vulnerable 2026-06-08 07:51:17.148938 Details available
An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by specifying the value of `userInfo`. When `userInfo` is passed into the `addAuthUser` function and processed by `sscanf` without size validation, it could lead to buffer overflow.
Published: 2026-03-02T00:00:00.000Z
Updated: 2026-03-05T15:56:42.518Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24110 not_vulnerable 2026-06-08 07:51:17.148369 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24109 not_vulnerable 2026-06-08 07:51:17.147862 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24108 not_vulnerable 2026-06-08 07:51:17.147365 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24107 not_vulnerable 2026-06-08 07:51:17.146639 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.