CVE-2025-45343

9.8 criticalEPSS 0.7%

Critical (9.8) in tenda w18e firmware. EPSS 0.7% chance of exploitation in the next 30 days.

An issue in Tenda W18E v.2.0 v.16.01.0.11 allows an attacker to execute arbitrary code via the editing functionality of the account module in the goform/setmodules route.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2025-05-28
Modified: 2026-07-05
Record from: the NVD, synced 2026-10-19

Affected

tenda:w18e_firmware

References

https://gist.github.com/isstabber/b363d47966965e5c0a8ec26d445e090b
https://www.tenda.com.cn/
https://gist.github.com/isstabber/b363d47966965e5c0a8ec26d445e090b

Check your stack JSON