CyberRota Analysis
AI-GeneratedA stack-based buffer overflow vulnerability exists in the QoS Edit function of Tenda W20E firmware version 15.11.0.6, allowing remote attackers to manipulate the qosListConnecttedNum argument. This could lead to arbitrary code execution, potentially compromising the device and the network it is connected to. Organizations using this firmware should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was identified in Tenda W20E 15.11.0.6(1068_1546_841)_CN_TDC. This issue affects the function lstAdd of the file /goform/editQos of the component QoS Edit. Such manipulation of the argument qosListConnecttedNum leads to stack-based buffer overflow. The attack may be launched remotely. The exploit is publicly available and might be used.