CVE-2025-44864: Command Injection
Published May 1, 2025
·Updated
Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetDebugCfg function via the module parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Affected Software
3 affected components
Tenda W20E
All of the following
Tenda W20e Firmware=15.11.0.6
Tenda W20E
Event History
May 1, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeakness
Jun 14, 57318
Event
via FIRST·11:59 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-44864?
CVE-2025-44864 has been categorized as a high severity vulnerability due to its potential for remote command execution.
2
How do I fix CVE-2025-44864?
To fix CVE-2025-44864, update the Tenda W20E firmware to the latest version provided by the vendor.
3
What type of vulnerability is CVE-2025-44864?
CVE-2025-44864 is a command injection vulnerability that allows attackers to execute arbitrary commands.
4
Who is affected by CVE-2025-44864?
CVE-2025-44864 affects users of the Tenda W20E router running firmware version V15.11.0.6.
5
When was CVE-2025-44864 reported?
CVE-2025-44864 was reported in 2025, detailing a security flaw in Tenda W20E firmware.