PT-2026-47309 · Tenda · W20E

Hacker128 · Publicado 2026-06-08 · Atualizado 2026-06-08 · CVE-2026-11524

NVD

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

A vulnerability has been found in Tenda W20E 15.11.0.6. Impacted is the function modifyWifiFilterRules of the file /goform/modifyWifiFilterRules of the component Web Management Interface. The manipulation of the argument wifiFilterListRemark leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Exploit

Correção

Buffer Overflow

Stack Overflow

Enumeração de Fraquezas

CWE-119

CWE-121

Identificadores relacionados

CVE-2026-11524

Produtos afetados

W20E

Referências · 7

• 🔥 https://github.com/Robots10/IoT_vlu/blob/main/reports/Tenda/formWifiFilterRulesModify/modifyWifiFilterRules.md · Exploit
• https://vuldb.com/vuln/369144/cti · Nota
• https://vuldb.com/cve/CVE-2026-11524 · Nota
• https://tenda.com.cn · Nota
• https://vuldb.com/submit/836478 · Nota
• https://vuldb.com/vuln/369144 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-11524 · Nota de Segurança