CVE-2022-40866

Tenda W20E router V15.11.0.6 (US_W20EV4.0br_V15.11.0.6(1068_1546_841)_CN_TDC) contains a stack overflow vulnerability in the function formSetDebugCfg with request /goform/setDebugCfg/

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-09-23

Last modified

2025-05-22

Weaknesses

CWE-787

Affected products

• W20e Firmware (Tenda)

References

• https://github.com/CPSeek/Router-vuls/blob/main/Tenda/W20E/setDebugCfg.md