PT-2023-29982 · Tenda · Tenda W18E

Name of the Vulnerable Software and Affected Versions: Tenda W18E version 16.01.0.81576 Description: The issue is related to a stack overflow vulnerability. It occurs via the portMirrorMirroredPorts parameter in the formSetNetCheckTools function. Recommendations: For Tenda W18E version...

CVE-2023-46369

CVE-2023-46369 affects Tenda W18E V16.01.0.8(1576). The vulnerability is a stack overflow in the portMirrorMirroredPorts parameter within the formSetNetCheckTools function. CVSS v3.1 metrics indicate a NETWORK attack, LOW complexity, NONE privileges, with high impact on confidentiality, integrity...

CVE-2023-46370

The CVE-2023-46370 vulnerability affects the Tenda W18E router, specifically firmware version V16.01.0.8(1576). The issue is a command injection in the hostName parameter of the formSetNetCheckTools function, caused by insufficient input validation. This can allow an attacker to execute arbitrary...

PT-2023-6706 · Tenda · Tenda W18E

Name of the Vulnerable Software and Affected Versions: Tenda W18E version V16.01.0.81576 Description: The issue is related to insufficient argument checking in the formSetNetCheckTools function of the Tenda W18E router's firmware, allowing a remote attacker to execute arbitrary code using the...

PT-2025-6092 · Tenda · Tenda W18E

Name of the Vulnerable Software and Affected Versions: Tenda W18E version 16.01.0.81625 Description: The issue concerns an authentication bypass in the web management portal, allowing an unauthorized remote attacker to gain administrative access by sending a specially crafted HTTP request...

PT-2025-6091 · Tenda · Tenda W18E

Name of the Vulnerable Software and Affected Versions: Tenda W18E version V16.01.0.81625 Description: A default credentials vulnerability allows unauthenticated remote attackers to access the web management portal using the default rzadmin account with administrative privileges. Recommendations:...

PT-2025-6090 · Tenda · Tenda W18E

Name of the Vulnerable Software and Affected Versions: Tenda W18E version 16.01.0.81625 Description: The issue concerns Incorrect Access Control, allowing an attacker to send a specially crafted HTTP POST request to the setQuickCfgWifiAndLogin function. This enables unauthorized changes to WiFi...

PT-2025-6088 · Tenda · Tenda W18E

Name of the Vulnerable Software and Affected Versions: Tenda W18E version 16.01.0.81625 Description: The issue concerns an incorrect access control mechanism. It allows an unauthenticated remote attacker to change the administrator password through the web management portal by sending a specially...

PT-2025-6093 · Tenda · Tenda W18E

Name of the Vulnerable Software and Affected Versions: Tenda W18E version V16.01.0.81625 Description: A stack overflow vulnerability in the Tenda W18E web management portal allows an authenticated remote attacker to cause a denial of service or potentially execute arbitrary code. This issue occur...

Binary Vulnerability in Tenda W18E Enterprise Router

The Tenda W18E is an enterprise router. A binary vulnerability exists in the Tenda W18E Enterprise Router, which can be exploited by attackers to cause a denial of service attack...