Approved changes feed: RSS · Atom

cpe:2.3:o:tenda:w20e_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductW20E Firmware (615bcc5c-2854-5361-b87f-c02ae4a0ef30)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-11524 vulnerable 2026-07-29 00:23:31.350100 Tenda W20E Web Management modifyWifiFilterRules stack-based overflow
HIGH (8.8)
A vulnerability has been found in Tenda W20E 15.11.0.6. Impacted is the function modifyWifiFilterRules of the file /goform/modifyWifiFilterRules of the component Web Management Interface. The manipulation of the argument wifiFilterListRemark leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2026-06-08T15:00:16.713Z
Updated: 2026-06-09T15:26:03.032Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11523 vulnerable 2026-07-29 00:23:31.349842 Tenda W20E Web Management PortalAuth formPortalAuth stack-based overflow
HIGH (8.8)
A flaw has been found in Tenda W20E 15.11.0.6. This issue affects the function formPortalAuth of the file /goform/PortalAuth of the component Web Management Interface. Executing a manipulation of the argument gotoUrl can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been published and may be used.
Published: 2026-06-08T14:45:09.883Z
Updated: 2026-06-08T16:36:03.017Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11522 vulnerable 2026-07-29 00:23:31.349542 Tenda W20E setPortMirror formSetPortMirror stack-based overflow
HIGH (8.8)
A vulnerability was detected in Tenda W20E 15.11.0.6. This vulnerability affects the function formSetPortMirror of the file /goform/setPortMirror. Performing a manipulation of the argument portMirrorMirroredPorts results in stack-based buffer overflow. The attack can be initiated remotely. The exploit is now public and may be used.
Published: 2026-06-08T14:30:11.465Z
Updated: 2026-06-08T15:52:25.265Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.