CVE-2022-48130: Tenda w20e Firmware

Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Tenda W20E v15.11.0.6 was discovered to contain multiple stack overflows in the function formSetStaticRoute via the parameters staticRouteNet, staticRouteMask, staticRouteGateway, staticRouteWAN.

Affected products

• Tenda w20e Firmware: version 15.11.0.6 only

Published 2023-02-02. Last modified 2026-06-17.