CVE-2022-40866

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2022-09-23 · updated 2026-06-17
Weakness: CWE-787

Description

Tenda W20E router V15.11.0.6 (US_W20EV4.0br_V15.11.0.6(1068_1546_841)_CN_TDC) contains a stack overflow vulnerability in the function formSetDebugCfg with request /goform/setDebugCfg/

Affected products

Tenda W20E: 15.11.0.6

References

https://github.com/CPSeek/Router-vuls/blob/main/Tenda/W20E/setDebugCfg.md
https://github.com/CPSeek/Router-vuls/blob/main/Tenda/W20E/setDebugCfg.md

Get alerted when CVE-2022-40866 or the next vulnerability affects your stack