Tenda W20E Buffer Overflow Vulnerability in Port Mapping Function

Vulnerability

A buffer overflow vulnerability has been identified in the Tenda W20E router, specifically in version V4.0br_V15.11.0.6. The issue arises in the 'goform/formDelPortMapping' component, where the failure to properly validate the 'pPortMapIndex' parameter allows for buffer overflow exploitation through the use of 'strcpy'.

Impact

Exploitation of this vulnerability can lead to arbitrary code execution or causing the device to crash and become unresponsive.

Added: Mar 2, 2026, 3:21 PM
Updated: Mar 2, 2026, 9:56 PM

Vulnerability Rating

Custom Algorithm
spread
4.5
impact
1.9
exploitability
4.9
remediation
0.0
relevance
3.4
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.