CVE-2022-45506: Tenda w30e Firmware

Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days.

Tenda W30E v1.0.1.25(633) was discovered to contain a command injection vulnerability via the fileNameMit parameter at /goform/delFileName.

Affected products

• Tenda w30e Firmware: version 1.0.1.25(633) only

Published 2022-12-08. Last modified 2026-06-17.