CVE-2025-57085: Tenda w30e Firmware

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the v17 parameter in the UploadCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

Affected products

• Tenda w30e Firmware: up to and including 16.01.0.19\(5037\)

Published 2025-09-09. Last modified 2026-06-17.