W15e Firmware (Tenda) - vulnerabilities (CVEs)

31 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2026-03-09. Vendor: Tenda.

CVEs of W15e Firmware

CVE-2026-30140 - CVSS 7.5 (high), 2026-03-09: An incorrect access control vulnerability exists in Tenda W15E V02.03.01.26_cn. An unauthenticated attacker can access the /cgi-bin/DownloadCfg/RouterCfm.jpg…
CVE-2024-4127 - CVSS 8.8 (high), 2024-04-24: A vulnerability was found in Tenda W15E 15.11.0.14. It has been classified as critical. Affected is the function guestWifiRuleRefresh. The manipulation of the…
CVE-2024-4126 - CVSS 8.8 (high), 2024-04-24: A vulnerability was found in Tenda W15E 15.11.0.14 and classified as critical. This issue affects the function formSetSysTime of the file…
CVE-2024-4125 - CVSS 8.8 (high), 2024-04-24: A vulnerability has been found in Tenda W15E 15.11.0.14 and classified as critical. This vulnerability affects the function formSetStaticRoute of the file…
CVE-2024-4124 - CVSS 8.8 (high), 2024-04-24: A vulnerability, which was classified as critical, was found in Tenda W15E 15.11.0.14. This affects the function formSetRemoteWebManage of the file…
CVE-2024-4123 - CVSS 8.8 (high), 2024-04-24: A vulnerability, which was classified as critical, has been found in Tenda W15E 15.11.0.14. Affected by this issue is the function formSetPortMapping of the…
CVE-2024-4122 - CVSS 8.8 (high), 2024-04-24: A vulnerability classified as critical was found in Tenda W15E 15.11.0.14. Affected by this vulnerability is the function formSetDebugCfg of the file…
CVE-2024-4121 - CVSS 8.8 (high), 2024-04-24: A vulnerability classified as critical has been found in Tenda W15E 15.11.0.14. Affected is the function formQOSRuleDel. The manipulation of the argument…
CVE-2024-4120 - CVSS 8.8 (high), 2024-04-24: A vulnerability was found in Tenda W15E 15.11.0.14. It has been rated as critical. This issue affects the function formIPMacBindModify of the file…
CVE-2024-4119 - CVSS 8.8 (high), 2024-04-24: A vulnerability was found in Tenda W15E 15.11.0.14. It has been declared as critical. This vulnerability affects the function formIPMacBindDel of the file…
CVE-2024-4118 - CVSS 8.8 (high), 2024-04-24: A vulnerability was found in Tenda W15E 15.11.0.14. It has been classified as critical. This affects the function formIPMacBindAdd of the file…
CVE-2024-4115 - CVSS 8.8 (high), 2024-04-24: A vulnerability, which was classified as critical, was found in Tenda W15E 15.11.0.14. Affected is the function formAddDnsForward of the file…
CVE-2024-4117 - CVSS 8.8 (high), 2024-04-24: A vulnerability was found in Tenda W15E 15.11.0.14 and classified as critical. Affected by this issue is the function formDelPortMapping of the file…
CVE-2024-4116 - CVSS 8.8 (high), 2024-04-24: A vulnerability has been found in Tenda W15E 15.11.0.14 and classified as critical. Affected by this vulnerability is the function formDelDhcpRule of the file…
CVE-2023-27063 - CVSS 9.8 (critical), 2023-03-13: Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the DNSDomainName parameter in the…
CVE-2023-27062 - CVSS 7.5 (high), 2023-03-13: Tenda V15V1.0 was discovered to contain a buffer overflow vulnerability via the gotoUrl parameter in the formPortalAuth function. This vulnerability allows…
CVE-2023-27065 - CVSS 7.5 (high), 2023-03-13: Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the picName parameter in the formDelWewifiPi function.…
CVE-2023-27061 - CVSS 9.8 (critical), 2023-03-13: Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the wifiFilterListRemark parameter in the…
CVE-2023-27064 - CVSS 7.5 (high), 2023-03-13: Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the index parameter in the formDelDnsForward function.…
CVE-2022-41396 - CVSS 7.8 (high), 2022-11-15: Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain multiple command injection vulnerabilities in the function setIPsecTunnelList via…
CVE-2022-42060 - CVSS 7.5 (high), 2022-11-15: Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a stack overflow via the setWanPpoe function. This vulnerability allows attackers…
CVE-2022-42058 - CVSS 9.8 (critical), 2022-11-15: Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a stack overflow via the setRemoteWebManage function. This vulnerability allows…
CVE-2022-42053 - CVSS 7.8 (high), 2022-11-15: Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a command injection vulnerability via the PortMappingServer parameter in the…
CVE-2022-40844 - CVSS 5.4 (medium), 2022-11-15: In Tenda (Shenzhen Tenda Technology Co., Ltd) AC1200 Router model W15Ev2 V15.11.0.10(1576), a Stored Cross Site Scripting (XSS) issue exists allowing an…
CVE-2022-41395 - CVSS 7.8 (high), 2022-11-15: Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a command injection vulnerability via the dmzHost parameter in the setDMZ function.
CVE-2022-40846 - CVSS 4.8 (medium), 2022-11-15: In Tenda AC1200 Router model W15Ev2 V15.11.0.10(1576), a Stored Cross Site Scripting (XSS) vulnerability exists allowing an attacker to execute JavaScript…
CVE-2022-40847 - CVSS 7.8 (high), 2022-11-15: In Tenda AC1200 Router model W15Ev2 V15.11.0.10(1576), there exists a command injection vulnerability in the function formSetFixTools. This vulnerability…
CVE-2022-40845 - CVSS 6.5 (medium), 2022-11-15: The Tenda AC1200 Router model W15Ev2 V15.11.0.10(1576) is affected by a password exposure vulnerability. When combined with the improper…
CVE-2022-40843 - CVSS 4.9 (medium), 2022-11-15: The Tenda AC1200 V-W15Ev2 V15.11.0.10(1576) router is vulnerable to improper authorization / improper session management that allows the router login page to…
CVE-2017-14515 - CVSS 7.5 (high), 2017-09-17: Heap-based Buffer Overflow on Tenda W15E devices before 15.11.0.14 allows remote attackers to cause a denial of service (temporary HTTP outage and forced…
CVE-2017-14514 - CVSS 7.5 (high), 2017-09-17: Directory Traversal on Tenda W15E devices before 15.11.0.14 allows remote attackers to read unencrypted files via a crafted URL.