WF
Product
W30e Firmware
63
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 18High 36Medium 9Low 0
Watch
Add W30e Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-45508 | 7.5 | Dec 8 | Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the new_account parameter at /goform/editUserName Affected: 1.0.1.25(633) |
| CVE-2022-45507 | 7.5 | Dec 8 | Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the editNameMit parameter at /goform/editFileName Affected: 1.0.1.25(633) |
| CVE-2022-45505 | 7.5 | Dec 8 | Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the cmdinput parameter at /goform/exeCommand Affected: 1.0.1.25(633) |
| CVE-2026-38834 | 7.3 | Apr 21 | Tenda W30E V2.0 V16.01.0.21 was found to contain a command injection vulnerability in the do_ping_action function via the hostName parameter Affected: 16.01.0.21 |
| CVE-2024-32290 | 6.7 | Apr 17 | Tenda W30E v1.0 v1.0.1.25(633) firmware has a stack overflow vulnerability via the page parameter in the fromAddressNat function Affected: 1.0.1.25(633) |
| CVE-2026-24435 | 6.5 | Jan 26 | Tenda W30E V2 Permissive CORS Allows Cross-origin Data Access Affected: through 16.01.0.19\(5037\) |
| CVE-2026-24439 | 6.5 | Jan 26 | Tenda W30E V2 Lacks X-Content-Type-Options Header Affected: through 16.01.0.19\(5037\) |
| CVE-2026-24431 | 6.5 | Jan 26 | Tenda W30E V2 Web UI Reveals Passwords in Cleartext Affected: through 16.01.0.19\(5037\) |
| CVE-2024-32287 | 6.5 | Apr 17 | Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability via the qos parameter in the fromqossetting function Affected: 1.0.1.25(633) |
| CVE-2024-32288 | 6.3 | Apr 17 | Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability located via the page parameter in the fromwebExcptypemanFilter function Affected: 1.0.1.25(633) |
| CVE-2026-24437 | 5.5 | Jan 26 | Tenda W30E V2 Missing Cache Controls for Credential-bearing Pages Affected: through 16.01.0.19\(5037\) |
| CVE-2026-24433 | 5.4 | Jan 26 | Tenda W30E V2 Stored XSS via Username Field Affected: through 16.01.0.19\(5037\) |
| CVE-2026-24432 | 4.3 | Jan 26 | Tenda W30E V2 Missing CSRF Protections for Administrative Actions Affected: through 16.01.0.19\(5037\) |