Paxiot

**Name of the Vulnerable Software and Affected Versions** Tenda W20E version 15.11.0.6(1068 1546 841) CN TDC **Description** A stack-based buffer overflow occurs in the QoS Edit component when the `lstAdd()` function in the '/goform/editQos' endpoint processes a manipulated `qosListConnecttedNum` argument. This issue allows for remote attacks. **Recommendations** As a temporary workaround, restrict access to the '/goform/editQos' endpoint or avoid using the `qosListConnecttedNum` argument until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Tenda W20E version 15.11.0.6(1068 1546 841) CN TDC **Description** A security flaw in the QoS Rule Deletion component allows remote exploitation. A stack-based buffer overflow occurs when the `qosIndex` argument is manipulated within the `formQOSRuleDel()` function of the '/goform/delQos' endpoint. A stack-based buffer overflow is a condition where a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially leading to crashes or arbitrary code execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the '/goform/delQos' endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Tenda W20E version 15.11.0.6(1068 1546 841) CN TDC **Description** A remote attack is possible due to a stack-based buffer overflow, which occurs when a buffer on the stack is overwritten. This issue exists in the `ipMacBindListStore()` function within the `/goform/addIpMacBind` endpoint when the `IPMacBindRule` variable is manipulated. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `/goform/addIpMacBind` endpoint to minimize the risk of exploitation.