Tenda W20E
Approved changes feed: RSS · Atom
cpe:2.3:h:tenda:w20e:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Tenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42) |
|---|---|
| Product | W20E (e8bba007-fe79-53ee-beca-d3eb975a4757) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-44867 |
not_vulnerable | 2026-06-08 07:25:10.754580 |
Details available
Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetNetCheckTools function via the hostName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Published: 2025-05-01T00:00:00.000Z
Updated: 2025-05-01T20:24:58.751Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-44866 |
not_vulnerable | 2026-06-08 07:25:10.754304 |
Details available
Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetDebugCfg function via the level parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Published: 2025-05-01T00:00:00.000Z
Updated: 2025-05-01T20:25:44.103Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-44865 |
not_vulnerable | 2026-06-08 07:25:10.753887 |
Details available
Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetDebugCfg function via the enable parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Published: 2025-05-01T00:00:00.000Z
Updated: 2025-05-01T20:26:35.551Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-44864 |
not_vulnerable | 2026-06-08 07:25:10.753373 |
Details available
Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetDebugCfg function via the module parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Published: 2025-05-01T00:00:00.000Z
Updated: 2025-05-01T20:27:18.485Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3874 |
not_vulnerable | 2026-06-08 06:43:51.726092 |
Tenda W20E SetRemoteWebManage formSetRemoteWebManage stack-based overflow
HIGH (8.8)
A vulnerability was found in Tenda W20E 15.11.0.6. It has been declared as critical. This vulnerability affects the function formSetRemoteWebManage of the file /goform/SetRemoteWebManage. The manipulation of the argument remoteIP leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-260908. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-04-16T15:31:06.633Z
Updated: 2024-08-01T20:26:57.026Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-26806 |
not_vulnerable | 2026-06-08 05:57:40.373917 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-26805 |
not_vulnerable | 2026-06-08 05:57:40.373174 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-48130 |
not_vulnerable | 2026-06-08 05:50:41.223096 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40868 |
not_vulnerable | 2026-06-08 05:48:28.259773 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40867 |
not_vulnerable | 2026-06-08 05:48:28.259292 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40866 |
not_vulnerable | 2026-06-08 05:48:28.258889 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40855 |
not_vulnerable | 2026-06-08 05:48:28.252568 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.