Description
A security flaw has been discovered in Tenda W20E 15.11.0.61068_1546_841_CN_TDC. Impacted is the function formDelWebAuthWhiteUser. Performing a manipulation of the argument webAuthWhiteUserIndex results in stack-based buffer overflow. The attack can be initiated remotely.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Tenda | W20E | 15.11.0.61068_1546_841_CN_TDC | — |
References
- VDB-403222 | Tenda W20E formDelWebAuthWhiteUser stack-based overflow vdb-entry technical-description
- VDB-403222 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- CVE-2026-90689 | CVE Analysis and Report third-party-advisory
- Submit #914981 | Tenda Router US_W20EV4.0br_V15.11.0.61068_1546_841_CN_TDC Memory Corruption third-party-advisory
- https://github.com/Amalll-Sec/router-vulnerability-research/blob/main/advisories/Tenda/W20E/formDelWebAuthWhiteUser/README.md related
- https://www.tenda.com.cn/ product