Every CVE whose affected-product data names Tenda W15e Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (31)
CVE-2023-27063 — CVSS 9.8 (critical): Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the DNSDomainName parameter in the…
CVE-2023-27061 — CVSS 9.8 (critical): Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the wifiFilterListRemark parameter…
CVE-2022-42058 — CVSS 9.8 (critical): Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a stack overflow via the setRemoteWebManage function. This…
CVE-2024-4121 — CVSS 8.8 (high): A vulnerability classified as critical has been found in Tenda W15E 15.11.0.14. Affected is the function formQOSRuleDel. The manipulation…
CVE-2024-4122 — CVSS 8.8 (high): A vulnerability classified as critical was found in Tenda W15E 15.11.0.14. Affected by this vulnerability is the function formSetDebugCfg…
CVE-2024-4123 — CVSS 8.8 (high): A vulnerability, which was classified as critical, has been found in Tenda W15E 15.11.0.14. Affected by this issue is the function…
CVE-2024-4117 — CVSS 8.8 (high): A vulnerability was found in Tenda W15E 15.11.0.14 and classified as critical. Affected by this issue is the function formDelPortMapping of…
CVE-2024-4119 — CVSS 8.8 (high): A vulnerability was found in Tenda W15E 15.11.0.14. It has been declared as critical. This vulnerability affects the function…
CVE-2024-4120 — CVSS 8.8 (high): A vulnerability was found in Tenda W15E 15.11.0.14. It has been rated as critical. This issue affects the function formIPMacBindModify of…
CVE-2024-4124 — CVSS 8.8 (high): A vulnerability, which was classified as critical, was found in Tenda W15E 15.11.0.14. This affects the function formSetRemoteWebManage of…
CVE-2024-4115 — CVSS 8.8 (high): A vulnerability, which was classified as critical, was found in Tenda W15E 15.11.0.14. Affected is the function formAddDnsForward of the…
CVE-2024-4116 — CVSS 8.8 (high): A vulnerability has been found in Tenda W15E 15.11.0.14 and classified as critical. Affected by this vulnerability is the function…
CVE-2024-4118 — CVSS 8.8 (high): A vulnerability was found in Tenda W15E 15.11.0.14. It has been classified as critical. This affects the function formIPMacBindAdd of the…
CVE-2024-4127 — CVSS 8.8 (high): A vulnerability was found in Tenda W15E 15.11.0.14. It has been classified as critical. Affected is the function guestWifiRuleRefresh. The…
CVE-2024-4126 — CVSS 8.8 (high): A vulnerability was found in Tenda W15E 15.11.0.14 and classified as critical. This issue affects the function formSetSysTime of the file…
CVE-2024-4125 — CVSS 8.8 (high): A vulnerability has been found in Tenda W15E 15.11.0.14 and classified as critical. This vulnerability affects the function…
CVE-2022-42053 — CVSS 7.8 (high): Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a command injection vulnerability via the PortMappingServer…
CVE-2022-41396 — CVSS 7.8 (high): Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain multiple command injection vulnerabilities in the function…
CVE-2022-40847 — CVSS 7.8 (high): In Tenda AC1200 Router model W15Ev2 V15.11.0.10(1576), there exists a command injection vulnerability in the function formSetFixTools. This…
CVE-2022-41395 — CVSS 7.8 (high): Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a command injection vulnerability via the dmzHost parameter in…
CVE-2026-30140 — CVSS 7.5 (high): An incorrect access control vulnerability exists in Tenda W15E V02.03.01.26_cn. An unauthenticated attacker can access the…
CVE-2017-14515 — CVSS 7.5 (high): Heap-based Buffer Overflow on Tenda W15E devices before 15.11.0.14 allows remote attackers to cause a denial of service (temporary HTTP…
CVE-2022-42060 — CVSS 7.5 (high): Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a stack overflow via the setWanPpoe function. This…
CVE-2023-27062 — CVSS 7.5 (high): Tenda V15V1.0 was discovered to contain a buffer overflow vulnerability via the gotoUrl parameter in the formPortalAuth function. This…
CVE-2023-27064 — CVSS 7.5 (high): Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the index parameter in the…
CVE-2023-27065 — CVSS 7.5 (high): Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the picName parameter in the…
CVE-2017-14514 — CVSS 7.5 (high): Directory Traversal on Tenda W15E devices before 15.11.0.14 allows remote attackers to read unencrypted files via a crafted URL.
CVE-2022-40845 — CVSS 6.5 (medium): The Tenda AC1200 Router model W15Ev2 V15.11.0.10(1576) is affected by a password exposure vulnerability. When combined with the improper…
CVE-2022-40844 — CVSS 5.4 (medium): In Tenda (Shenzhen Tenda Technology Co., Ltd) AC1200 Router model W15Ev2 V15.11.0.10(1576), a Stored Cross Site Scripting (XSS) issue…
CVE-2022-40843 — CVSS 4.9 (medium): The Tenda AC1200 V-W15Ev2 V15.11.0.10(1576) router is vulnerable to improper authorization / improper session management that allows the…
CVE-2022-40846 — CVSS 4.8 (medium): In Tenda AC1200 Router model W15Ev2 V15.11.0.10(1576), a Stored Cross Site Scripting (XSS) vulnerability exists allowing an attacker to…