Description
A vulnerability was identified in Tenda W20E 15.11.0.61068_1546_841_CN_TDC. This issue affects the function formIPMacBindAdd of the component HTTP Handler. Such manipulation of the argument IPMacBindRule leads to stack-based buffer overflow. It is possible to launch the attack remotely.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Tenda | W20E | 15.11.0.61068_1546_841_CN_TDC | — |
References
- VDB-403221 | Tenda W20E HTTP formIPMacBindAdd stack-based overflow vdb-entry technical-description
- VDB-403221 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- CVE-2026-90688 | CVE Analysis and Report third-party-advisory
- Submit #914958 | Tenda Router US_W20EV4.0br_V15.11.0.61068_1546_841_CN_TDC Memory Corruption third-party-advisory
- https://github.com/Amalll-Sec/router-vulnerability-research/blob/main/advisories/Tenda/W20E/formIPMacBindAdd/README.md related
- https://www.tenda.com.cn/ product