CVE-2024-46434

8.8 highEPSS 0.9%

High (8.8) in tenda w18e firmware. EPSS 0.9% chance of exploitation in the next 30 days.

Tenda W18E V16.01.0.8(1625) suffers from authentication bypass in the web management portal allowing an unauthorized remote attacker to gain administrative access by sending a specially crafted HTTP request.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 60% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2025-02-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

tenda:w18e_firmware

References

https://reddassolutions.com/blog/tenda_w18e_security_research

Check your stack JSON