CyberRota Analysis
AI-GeneratedA stack-based buffer overflow vulnerability exists in the QoS Rule Deletion function of Tenda W20E firmware version 15.11.0.6, allowing remote attackers to manipulate the qosIndex argument. Successful exploitation could lead to arbitrary code execution, posing a significant risk to affected systems. Organizations using this firmware should prioritize immediate remediation to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A security flaw has been discovered in Tenda W20E 15.11.0.6(1068_1546_841)_CN_TDC. Impacted is the function formQOSRuleDel of the file /goform/delQos of the component QoS Rule Deletion. Performing a manipulation of the argument qosIndex results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.