A vulnerability classified as critical has been found in Tenda W20E 15.11.0.6. Affected is the function
formSetNetCheckTools. The manipulation of the argument Hostname leads to command injection.
This vulnerability is traded as CVE-2025-44867. It is possible to launch the attack remotely. There is no exploit available.
