Description
A weakness has been identified in Tenda W20E 15.11.0.6(1068_1546_841)_CN_TDC. The affected element is the function ipMacBindListStore of the file /goform/addIpMacBind. Executing a manipulation of the argument IPMacBindRule can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Tenda | W20E | 15.11.0.6(1068_1546_841)_CN_TDC | — |
References
- VDB-389957 | Tenda W20E addIpMacBind ipMacBindListStore stack-based overflow vdb-entry technical-description
- VDB-389957 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- CVE-2026-19824 | CVE Analysis and Report third-party-advisory
- Submit #869024 | Tenda W20E US_W20EV4.0br_V15.11.0.6(1068_1546_841)_CN_TDC.bin Buffer Overflow third-party-advisory
- https://github.com/paueger/mycve/blob/main/Tenda_W20E/5.md exploit
- https://www.tenda.com.cn/ product