Tenda W18E

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:h:tenda:w18e:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductW18E (2900c4a8-8f12-59ef-a104-cce023e3d297)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-3203 not_vulnerable 2026-06-08 07:23:08.436280 Tenda W18E setModules formSetAccountList stack-based overflow
MEDIUM (4.3)
A vulnerability classified as problematic was found in Tenda W18E 16.01.0.11. Affected by this vulnerability is the function formSetAccountList of the file /goform/setModules. The manipulation of the argument Password leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-04-04T02:31:09.829Z
Updated: 2025-04-04T15:45:15.623Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-46437 not_vulnerable 2026-06-08 06:48:10.069265 Details available
A sensitive information disclosure vulnerability in the Tenda W18E V16.01.0.8(1625) web management portal allows an unauthenticated remote attacker to retrieve sensitive configuration information, including WiFi SSID, WiFi password, and base64-encoded administrator credentials, by sending a specially crafted HTTP POST request to the getQuickCfgWifiAndLogin function, bypassing authentication checks.
Published: 2025-02-10T00:00:00.000Z
Updated: 2025-02-10T21:40:28.464Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-46436 not_vulnerable 2026-06-08 06:48:10.068994 Details available
Hardcoded credentials in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to gain root access to the device over the telnet service.
Published: 2025-02-10T00:00:00.000Z
Updated: 2025-02-10T21:48:28.279Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-46435 not_vulnerable 2026-06-08 06:48:10.068717 Details available
A stack overflow vulnerability in the Tenda W18E V16.01.0.8(1625) web management portal allows an authenticated remote attacker to cause a denial of service or potentially execute arbitrary code. This vulnerability occurs due to improper input validation when handling user-supplied data in the delFacebookPic function.
Published: 2025-02-10T00:00:00.000Z
Updated: 2025-02-10T21:41:42.771Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-46434 not_vulnerable 2026-06-08 06:48:10.068340 Details available
Tenda W18E V16.01.0.8(1625) suffers from authentication bypass in the web management portal allowing an unauthorized remote attacker to gain administrative access by sending a specially crafted HTTP request.
Published: 2025-02-10T00:00:00.000Z
Updated: 2025-02-10T21:47:57.677Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-46433 not_vulnerable 2026-06-08 06:48:10.067855 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-46432 not_vulnerable 2026-06-08 06:48:10.067297 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-46431 not_vulnerable 2026-06-08 06:48:10.067002 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-46430 not_vulnerable 2026-06-08 06:48:10.066582 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-46429 not_vulnerable 2026-06-08 06:48:10.065942 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.