Approved changes feed: RSS · Atom

cpe:2.3:o:tenda:w20e_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductW20E Firmware (615bcc5c-2854-5361-b87f-c02ae4a0ef30)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-90689 vulnerable 2026-09-16 04:33:05.367081 Tenda W20E formDelWebAuthWhiteUser stack-based overflow
HIGH (8.8)
A security flaw has been discovered in Tenda W20E 15.11.0.61068_1546_841_CN_TDC. Impacted is the function formDelWebAuthWhiteUser. Performing a manipulation of the argument webAuthWhiteUserIndex results in stack-based buffer overflow. The attack can be initiated remotely.
Published: 2026-09-14T06:15:08.707Z
Updated: 2026-09-14T10:55:57.386Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-90688 vulnerable 2026-09-16 04:33:05.179115 Tenda W20E HTTP formIPMacBindAdd stack-based overflow
MEDIUM (6.5)
A vulnerability was identified in Tenda W20E 15.11.0.61068_1546_841_CN_TDC. This issue affects the function formIPMacBindAdd of the component HTTP Handler. Such manipulation of the argument IPMacBindRule leads to stack-based buffer overflow. It is possible to launch the attack remotely.
Published: 2026-09-14T06:00:12.401Z
Updated: 2026-09-15T15:57:34.857Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11524 vulnerable 2026-07-29 00:23:31.350100 Tenda W20E Web Management modifyWifiFilterRules stack-based overflow
HIGH (8.8)
A vulnerability has been found in Tenda W20E 15.11.0.6. Impacted is the function modifyWifiFilterRules of the file /goform/modifyWifiFilterRules of the component Web Management Interface. The manipulation of the argument wifiFilterListRemark leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2026-06-08T15:00:16.713Z
Updated: 2026-06-09T15:26:03.032Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11523 vulnerable 2026-07-29 00:23:31.349842 Tenda W20E Web Management PortalAuth formPortalAuth stack-based overflow
HIGH (8.8)
A flaw has been found in Tenda W20E 15.11.0.6. This issue affects the function formPortalAuth of the file /goform/PortalAuth of the component Web Management Interface. Executing a manipulation of the argument gotoUrl can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been published and may be used.
Published: 2026-06-08T14:45:09.883Z
Updated: 2026-06-08T16:36:03.017Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11522 vulnerable 2026-07-29 00:23:31.349542 Tenda W20E setPortMirror formSetPortMirror stack-based overflow
HIGH (8.8)
A vulnerability was detected in Tenda W20E 15.11.0.6. This vulnerability affects the function formSetPortMirror of the file /goform/setPortMirror. Performing a manipulation of the argument portMirrorMirroredPorts results in stack-based buffer overflow. The attack can be initiated remotely. The exploit is now public and may be used.
Published: 2026-06-08T14:30:11.465Z
Updated: 2026-06-08T15:52:25.265Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.