CVE-2024-46431

Tenda W18E V16.01.0.81625 is vulnerable to Buffer Overflow. An attacker with access to the web management portal can exploit this vulnerability by sending specially crafted data to the delWewifiPic function...

CVE-2024-46432

Tenda W18E V16.01.0.81625 is vulnerable to Incorrect Access Control. An attacker can send a specially crafted HTTP POST request to the setQuickCfgWifiAndLogin function, which allows unauthorized changes to WiFi configuration settings and administrative credentials...

CVE-2024-46435

Technical details about CVE-2024-46435 are not publicly available in the provided connected documents. Please monitor for updates; the current corpus does not reveal affected products, vectors, impacts, or available fixes beyond the initial description.

CVE-2024-46437

A sensitive information disclosure vulnerability in the Tenda W18E V16.01.0.81625 web management portal allows an unauthenticated remote attacker to retrieve sensitive configuration information, including WiFi SSID, WiFi password, and base64-encoded administrator credentials, by sending a special...

CVE-2024-46430

Tenda W18E V16.01.0.81625 is vulnerable to Incorrect Access Control. Unauthorized password change via the web management portal allows an unauthenticated remote attacker to change the administrator password by sending a specially crafted HTTP POST request to the setLoginPassword function, bypassi...

CVE-2024-46429

A hardcoded credentials vulnerability in Tenda W18E V16.01.0.81625 allows unauthenticated remote attackers to access the web management portal using a default guest account with administrative privileges...

CVE-2024-46437

A sensitive information disclosure vulnerability in the Tenda W18E V16.01.0.81625 web management portal allows an unauthenticated remote attacker to retrieve sensitive configuration information, including WiFi SSID, WiFi password, and base64-encoded administrator credentials, by sending a special...

Tenda W18E 信任管理问题漏洞

The Tenda W18E is a wireless router from the Chinese company Tenda. The Tenda W18E suffers from a trust management issue vulnerability that stems from the presence of a default credentials vulnerability that can be exploited by an attacker to access the web management portal...

Tenda W18E 信任管理问题漏洞

The Tenda W18E is a wireless router from the Chinese company Tenda. The Tenda W18E suffers from a trust management issue vulnerability that stems from the presence of hard-coded credentials, no details of the vulnerability are provided at this time...

CVE-2024-46436

CVE-2024-46436 : Affects Tenda W18E device with firmware V16.01.0.8(1625). Public data states hardcoded credentials enable unauthenticated remote attackers to gain root access via the telnet service. This is consistent across multiple sources in the connected set. Root access via telnet constitut...

CVE-2024-46432

Tenda W18E V16.01.0.81625 is vulnerable to Incorrect Access Control. An attacker can send a specially crafted HTTP POST request to the setQuickCfgWifiAndLogin function, which allows unauthorized changes to WiFi configuration settings and administrative credentials...

CVE-2024-46433

A default credentials vulnerability in Tenda W18E V16.01.0.81625 allows unauthenticated remote attackers to access the web management portal using the default rzadmin account with administrative privileges...

Tenda W18E 授权问题漏洞

The Tenda W18E is a wireless router from the Chinese company Tenda. An authorization issue vulnerability exists in the Tenda W18E version 16.01.0.81625, which stems from improper authentication of the device and can be exploited by an attacker to gain administrative access by sending a specially...

CVE-2024-46434

Tenda W18E V16.01.0.81625 suffers from authentication bypass in the web management portal allowing an unauthorized remote attacker to gain administrative access by sending a specially crafted HTTP request...

Tenda W18E 访问控制错误漏洞

The Tenda W18E is a wireless router from the Chinese company Tenda. An access control error vulnerability exists in the Tenda W18E version 16.01.0.81625, which stems from a faulty access control in the SetQuickcfgWifianDlogin function, and can be exploited by an attacker to make unauthorized...

CVE-2024-46432

Summary (CVE-2024-46432) : Tenda W18E router (version 16.01.0.8(1625)) is affected by an Incorrect Access Control vulnerability in the SetQuickcfgWifiAndDlogin/setQuickCfgWifiAndLogin function, allowing an attacker to issue a crafted HTTP POST and make unauthorized changes to WiFi configuration a...

CVE-2024-46437

The CVE-2024-46437 entry concerns the Tenda W18E web management portal (V16.01.0.8(1625)). A vulnerability in the getQuickCfgWifiAndLogin function allows an unauthenticated attacker to retrieve sensitive configuration data (WiFi SSID, WiFi password, and base64-encoded administrator credentials) v...

CVE-2024-46429

A hardcoded credentials vulnerability in Tenda W18E V16.01.0.81625 allows unauthenticated remote attackers to access the web management portal using a default guest account with administrative privileges...

CVE-2024-46434

Tenda W18E V16.01.0.81625 suffers from authentication bypass in the web management portal allowing an unauthorized remote attacker to gain administrative access by sending a specially crafted HTTP request...

CVE-2024-46435

A stack overflow vulnerability in the Tenda W18E V16.01.0.81625 web management portal allows an authenticated remote attacker to cause a denial of service or potentially execute arbitrary code. This vulnerability occurs due to improper input validation when handling user-supplied data in the...