CVE-2024-46430

Tenda W18E V16.01.0.81625 is vulnerable to Incorrect Access Control. Unauthorized password change via the web management portal allows an unauthenticated remote attacker to change the administrator password by sending a specially crafted HTTP POST request to the setLoginPassword function, bypassi...

CVE-2024-46429

A hardcoded credentials vulnerability in Tenda W18E V16.01.0.81625 allows unauthenticated remote attackers to access the web management portal using a default guest account with administrative privileges...

CVE-2024-46429

A hardcoded credentials vulnerability in Tenda W18E V16.01.0.81625 allows unauthenticated remote attackers to access the web management portal using a default guest account with administrative privileges...

CVE-2024-46430

Tenda W18E V16.01.0.81625 is vulnerable to Incorrect Access Control. Unauthorized password change via the web management portal allows an unauthenticated remote attacker to change the administrator password by sending a specially crafted HTTP POST request to the setLoginPassword function, bypassi...

CVE-2024-46435

A stack overflow vulnerability in the Tenda W18E V16.01.0.81625 web management portal allows an authenticated remote attacker to cause a denial of service or potentially execute arbitrary code. This vulnerability occurs due to improper input validation when handling user-supplied data in the...

CVE-2024-46433

A default credentials vulnerability in Tenda W18E V16.01.0.81625 allows unauthenticated remote attackers to access the web management portal using the default rzadmin account with administrative privileges...

CVE-2024-46433

A default credentials vulnerability in Tenda W18E V16.01.0.81625 allows unauthenticated remote attackers to access the web management portal using the default rzadmin account with administrative privileges...

CVE-2024-46429

A hardcoded credentials vulnerability in Tenda W18E V16.01.0.81625 allows unauthenticated remote attackers to access the web management portal using a default guest account with administrative privileges...

CVE-2024-46433

The CVE-2024-46433 entry describes a default-credentials vulnerability in the Tenda W18E router (version V16.01.0.8(1625)). The root cause is presence of a default admin account (rzadmin) that can be used by unauthenticated remote attackers to access the web management portal with administrative ...

CVE-2024-46434

Tenda W18E V16.01.0.81625 suffers from authentication bypass in the web management portal allowing an unauthorized remote attacker to gain administrative access by sending a specially crafted HTTP request...

CVE-2024-46435

Technical details about CVE-2024-46435 are not publicly available in the provided connected documents. Please monitor for updates; the current corpus does not reveal affected products, vectors, impacts, or available fixes beyond the initial description.

CVE-2024-46435

A stack overflow vulnerability in the Tenda W18E V16.01.0.81625 web management portal allows an authenticated remote attacker to cause a denial of service or potentially execute arbitrary code. This vulnerability occurs due to improper input validation when handling user-supplied data in the...

CVE-2024-46434

Tenda W18E V16.01.0.81625 suffers from authentication bypass in the web management portal allowing an unauthorized remote attacker to gain administrative access by sending a specially crafted HTTP request...

CVE-2024-46431

Tenda W18E V16.01.0.81625 is vulnerable to Buffer Overflow. An attacker with access to the web management portal can exploit this vulnerability by sending specially crafted data to the delWewifiPic function...

CVE-2024-46434

CVE-2024-46434 affects the Tenda W18E router (version 16.01.0.8(1625)). The connected documents describe an authentication bypass in the web management portal that lets an unauthorized remote attacker gain administrative access by sending a specially crafted HTTP request. The CVSSv3.1 metrics ind...

CVE-2024-46429

A hardcoded credentials vulnerability in Tenda W18E V16.01.0.81625 allows unauthenticated remote attackers to access the web management portal using a default guest account with administrative privileges...

CVE-2024-46431

Tenda W18E V16.01.0.81625 is vulnerable to Buffer Overflow. An attacker with access to the web management portal can exploit this vulnerability by sending specially crafted data to the delWewifiPic function...

CVE-2024-46431

CVE-2024-46431 affects Tenda W18E routers (V16.01.0.8(1625)). The vulnerability is a buffer overflow in the delWewifiPic function caused by insufficient input length validation, exploitable via the web management portal by sending specially crafted data. In the connected sources, impact is descri...

CVE-2024-46429

CVE-2024-46429 concerns a hardcoded credentials vulnerability in the Tenda W18E web management portal. Affected component: W18E device web interface (V16.01.0.8(1625)). Root cause: presence of a default guest account with administrative privileges that can be used by unauthenticated remote attack...

Tenda W18E 信任管理问题漏洞

The Tenda W18E is a wireless router from the Chinese company Tenda. The Tenda W18E is vulnerable to a trust management issue that can be exploited by an attacker to access the web management portal...