CVE-2022-48130

9.8 criticalEPSS 0.9%

Critical (9.8) in tenda w20e firmware. EPSS 0.9% chance of exploitation in the next 30 days.

Tenda W20E v15.11.0.6 was discovered to contain multiple stack overflows in the function formSetStaticRoute via the parameters staticRouteNet, staticRouteMask, staticRouteGateway, staticRouteWAN.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 60% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2023-02-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

tenda:w20e_firmware

References

https://github.com/Stevenbaga/fengsha/blob/main/W20E/formSetStaticRoute.md
https://github.com/Stevenbaga/fengsha/blob/main/W20E/formSetStaticRoute.md

Check your stack JSON