Description
Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability via the page parameter in the fromDhcpListClient function.
Metrics
CVSS 3.1 8.0/10
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| tenda | w30e_firmware | 1.0.1.25\(633\) |
References
- https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/W30E/fromDhcpListClient_page.mdExploit, Third Party Advisory
- https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/W30E/fromDhcpListClient_page.mdExploit, Third Party Advisory
Timeline
- Published
- Apr 17, 2024
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed