Login Request a demo
WF
Product
W30e Firmware
by Tenda · last CVE Apr 21, 2026
63
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities63In the news0Timeline
Severity mix
Critical 18High 36Medium 9Low 0
Severity
All severities63Critical18High36Medium9Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add W30e Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-24428
8.8
0%
Jan 26
Tenda W30E V2 Incorrect Authorization Allows Administrator Password Change
Affected: through 16.01.0.19\(5037\)
CVE-2026-24440
8.8
0%
Jan 26
Tenda W30E V2 Allows Password Changes Without Verifying Current Password
Affected: through 16.01.0.19\(5037\)
CVE-2024-4171
8.8
1%
Apr 25
A vulnerability classified as critical has been found in Tenda W30E 1.0/1.0.1.25
Affected: 1.0.1.25
CVE-2024-32292
8.8
2%
Apr 17
Tenda W30E v1.0 V1.0.1.25(633) firmware contains a command injection vulnerablility in the formexeCommand function via the cmdinput parameter
Affected: 1.0.1.25(633)
CVE-2024-3882
8.8
1%
Apr 16
A vulnerability was found in Tenda W30E 1.0.1.25(633)
Affected: 1.0.1.25(633)
CVE-2024-3881
8.8
1%
Apr 16
A vulnerability was found in Tenda W30E 1.0.1.25(633) and classified as critical
Affected: 1.0.1.25(633)
CVE-2024-3880
8.8
4%
Apr 16
A vulnerability has been found in Tenda W30E 1.0.1.25(633) and classified as critical
Affected: 1.0.1.25(633)
CVE-2024-3879
8.8
1%
Apr 16
A vulnerability, which was classified as critical, was found in Tenda W30E 1.0.1.25(633)
Affected: 1.0.1.25(633)
CVE-2024-52789
8.0
0%
Nov 19
Tenda W30E v2.0 V16.01.0.8 was discovered to contain a hardcoded password vulnerability in /etc_ro/shadow, which allows attackers to log in as root
Affected: 16.01.0.8
CVE-2024-32293
8.0
6%
Apr 17
Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability via the page parameter in the fromDhcpListClient function
Affected: 1.0.1.25(633)
CVE-2024-32285
8.0
1%
Apr 17
Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability via the password parameter in the formaddUserName function
Affected: 1.0.1.25(633)
CVE-2026-24430
7.5
0%
Jan 26
Tenda W30E V2 HTTP Responses Expose Plaintext Credentials
Affected: through 16.01.0.19\(5037\)
CVE-2025-57086
7.5
0%
Sep 9
Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the String parameter in the formDeleteMeshNode function
Affected: through 16.01.0.19\(5037\)
CVE-2025-57087
7.5
0%
Sep 9
Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the countryCode parameter in the werlessAdvancedSet function
Affected: through 16.01.0.19\(5037\)
CVE-2024-32291
7.5
1%
Apr 17
Tenda W30E v1.0 firmware v1.0.1.25(633) has a stack overflow vulnerability via the page parameter in the fromNatlimit function
Affected: 1.0.1.25(633)
CVE-2022-45525
7.5
1%
Dec 8
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the downaction parameter at /goform/CertListInfo
Affected: 1.0.1.25(633)
CVE-2022-45524
7.5
1%
Dec 8
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the opttype parameter at /goform/IPSECsave
Affected: 1.0.1.25(633)
CVE-2022-45523
7.5
1%
Dec 8
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/L7Im
Affected: 1.0.1.25(633)
CVE-2022-45522
7.5
1%
Dec 8
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/SafeClientFilter
Affected: 1.0.1.25(633)
CVE-2022-45521
7.5
1%
Dec 8
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/SafeUrlFilter
Affected: 1.0.1.25(633)
CVE-2022-45520
7.5
1%
Dec 8
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/qossetting
Affected: 1.0.1.25(633)
CVE-2022-45519
7.5
1%
Dec 8
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the Go parameter at /goform/SafeMacFilter
Affected: 1.0.1.25(633)
CVE-2022-45518
7.5
1%
Dec 8
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/SetIpBind
Affected: 1.0.1.25(633)
CVE-2022-45517
7.5
1%
Dec 8
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/VirtualSer
Affected: 1.0.1.25(633)
CVE-2022-45516
7.5
1%
Dec 8
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/NatStaticSetting
Affected: 1.0.1.25(633)
CVE-2022-45515
7.5
1%
Dec 8
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the entries parameter at /goform/addressNat
Affected: 1.0.1.25(633)
CVE-2022-45514
7.5
1%
Dec 8
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/webExcptypemanFilter
Affected: 1.0.1.25(633)
CVE-2022-45513
7.5
1%
Dec 8
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/P2pListFilter
Affected: 1.0.1.25(633)
CVE-2022-45512
7.5
1%
Dec 8
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/SafeEmailFilter
Affected: 1.0.1.25(633)
CVE-2022-45511
7.5
1%
Dec 8
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the PPPOEPassword parameter at /goform/QuickIndex
Affected: 1.0.1.25(633)
CVE-2022-45510
7.5
1%
Dec 8
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the mit_ssid_index parameter at /goform/AdvSetWrlsafeset
Affected: 1.0.1.25(633)
CVE-2022-45509
7.5
1%
Dec 8
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the account parameter at /goform/addUserName
Affected: 1.0.1.25(633)
CVE-2022-45508
7.5
1%
Dec 8
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the new_account parameter at /goform/editUserName
Affected: 1.0.1.25(633)
CVE-2022-45507
7.5
1%
Dec 8
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the editNameMit parameter at /goform/editFileName
Affected: 1.0.1.25(633)
CVE-2022-45505
7.5
1%
Dec 8
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the cmdinput parameter at /goform/exeCommand
Affected: 1.0.1.25(633)
CVE-2026-38834
7.3
1%
Apr 21
Tenda W30E V2.0 V16.01.0.21 was found to contain a command injection vulnerability in the do_ping_action function via the hostName parameter
Affected: 16.01.0.21
Showing 36