PT-2026-22610 · Tenda · Tenda W20E

Akuma-Qaq · Publicado 2026-03-02 · Atualizado 2026-03-07 · CVE-2026-24110

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Tenda W20E version 4.0br V15.11.0.6

Description A buffer overflow issue exists in the Tenda W20E. The issue occurs due to insufficient size validation when processing overly long addDhcpRules data. Specifically, the addDhcpRule function uses sscanf to process the rules, and the lack of validation for dhcpsIndex, dhcpsIP, and dhcpsMac can lead to buffer overflows. The vulnerable function is addDhcpRule. The sscanf function is used with the format string " %dt%[^t]t%[^ rt]".

Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-120

Identificadores relacionados

CVE-2026-24110

Produtos afetados

Tenda W20E

Referências · 9

• 🔥 https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2026-24110 · Exploit
• https://osv.dev/vulnerability/CVE-2026-24110 · Aviso do Fabricante
• https://twitter.com/cracbot/status/2029874845660647921 · Publicação no Twitter
• https://t.me/cveNotify/153966 · Publicação no Telegram
• https://twitter.com/vuldb/status/2028501646691704945 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-24110 · Nota de Segurança
• https://twitter.com/cracbot/status/2029512385766264969 · Publicação no Twitter
• https://twitter.com/cracbot/status/2030237139909410846 · Publicação no Twitter
• https://tenda.com.cn/material/show/2707 · Nota