The vulnerability is a buffer overflow in the Tenda W20E router firmware version 16.01.0.6(2782). The flaw enables an attacker to execute arbitrary code on the device, potentially compromising its confidentiality, integrity, and availability, and allowing further exploitation of the network the router serves.

Tenda W20E wireless router running firmware version 16.01.0.6(2782). The vulnerability is an incomplete fix for earlier issues, but only this specific build is affected.

The CVE description does not report a CVSS score, and the EPSS score is not available. The vulnerability is not listed in the CISA KEV catalog. The lack of published exploitation metrics means the likelihood of real-world exploitation cannot be quantified, but the ability to run arbitrary code implies high potential impact. Based on the description, the likely attack vector is network traffic that can reach the router’s management or data plane pathways, though explicit details are missing.