W30e Firmware vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

WF

Product

W30e Firmware

by Tenda · last CVE Apr 21, 2026

63

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities63 In the news0 Timeline

Severity mix

Critical 18High 36Medium 9Low 0

Severity

All severities63 Critical18 High36 Medium9 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add W30e Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-38835	9.8	2%	Apr 21	Tenda W30E V2.0 V16.01.0.21 was found to contain a command injection vulnerability in the formSetUSBPartitionUmount function via the usbPartitionName parameter Affected: 16.01.0.21
CVE-2026-24436	9.8	0%	Jan 26	Tenda W30E V2 Lacks Rate Limiting on Authentication Affected: through 16.01.0.19\(5037\)
CVE-2026-24429	9.8	0%	Jan 26	Tenda W30E V2 Hardcoded Default Password for Built-in Account Affected: through 16.01.0.19\(5037\)
CVE-2025-57085	9.8	0%	Sep 9	Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the v17 parameter in the UploadCfg function Affected: through 16.01.0.19\(5037\)
CVE-2024-32286	9.8	1%	Apr 17	Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability located via the page parameter in the fromVirtualSer function Affected: 1.0.1.25(633)
CVE-2023-49411	9.8	1%	Dec 7	Tenda W30E V16.01.0.12(4843) contains a stack overflow vulnerability via the function formDeleteMeshNode Affected: 16.01.0.12(4843)
CVE-2023-49406	9.8	2%	Dec 7	Tenda W30E V16.01.0.12(4843) was discovered to contain a Command Execution vulnerability via the function /goform/telnet Affected: 16.01.0.12(4843)
CVE-2023-49405	9.8	1%	Dec 7	Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function UploadCfg Affected: 16.01.0.12(4843)
CVE-2023-49404	9.8	1%	Dec 7	Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function formAdvancedSetListSet Affected: 16.01.0.12(4843)
CVE-2023-50002	9.8	1%	Dec 7	Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function formRebootMeshNode Affected: 16.01.0.12(4843)
CVE-2023-50001	9.8	1%	Dec 7	Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function formUpgradeMeshOnline Affected: 16.01.0.12(4843)
CVE-2023-50000	9.8	1%	Dec 7	Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function formResetMeshNode Affected: 16.01.0.12(4843)
CVE-2023-49999	9.8	2%	Dec 7	Tenda W30E V16.01.0.12(4843) was discovered to contain a command injection vulnerability via the function setUmountUSBPartition Affected: 16.01.0.12(4843)
CVE-2023-49410	9.8	1%	Dec 7	Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function via the function set_wan_status Affected: 16.01.0.12(4843)
CVE-2023-49403	9.8	2%	Dec 7	Tenda W30E V16.01.0.12(4843) was discovered to contain a command injection vulnerability via the function setFixTools Affected: 16.01.0.12(4843)
CVE-2023-49402	9.8	1%	Dec 7	Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function localMsg Affected: 16.01.0.12(4843)
CVE-2023-25231	9.8	1%	Feb 27	Tenda Router W30E V1.0.1.25(633) is vulnerable to Buffer Overflow in function fromRouteStatic via parameters entrys and mitInterface Affected: v1.0.1.25(633)
CVE-2022-45506	9.8	2%	Dec 8	Tenda W30E v1.0.1.25(633) was discovered to contain a command injection vulnerability via the fileNameMit parameter at /goform/delFileName Affected: 1.0.1.25(633)