Tenda W18E Firmware 16.01.0.8(1625)
Approved changes feed: RSS · Atom
cpe:2.3:o:tenda:w18e_firmware:16.01.0.8\(1625\):*:*:*:*:*:*:*
part: o version: 16.01.0.8(1625) update: *
| Vendor | Tenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42) |
|---|---|
| Product | W18E Firmware (38dfa180-5a1c-5190-96be-8092807f528c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-46437 |
vulnerable | 2026-06-08 06:48:10.069243 |
Details available
A sensitive information disclosure vulnerability in the Tenda W18E V16.01.0.8(1625) web management portal allows an unauthenticated remote attacker to retrieve sensitive configuration information, including WiFi SSID, WiFi password, and base64-encoded administrator credentials, by sending a specially crafted HTTP POST request to the getQuickCfgWifiAndLogin function, bypassing authentication checks.
Published: 2025-02-10T00:00:00.000Z
Updated: 2025-02-10T21:40:28.464Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-46436 |
vulnerable | 2026-06-08 06:48:10.068972 |
Details available
Hardcoded credentials in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to gain root access to the device over the telnet service.
Published: 2025-02-10T00:00:00.000Z
Updated: 2025-02-10T21:48:28.279Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-46435 |
vulnerable | 2026-06-08 06:48:10.068695 |
Details available
A stack overflow vulnerability in the Tenda W18E V16.01.0.8(1625) web management portal allows an authenticated remote attacker to cause a denial of service or potentially execute arbitrary code. This vulnerability occurs due to improper input validation when handling user-supplied data in the delFacebookPic function.
Published: 2025-02-10T00:00:00.000Z
Updated: 2025-02-10T21:41:42.771Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-46434 |
vulnerable | 2026-06-08 06:48:10.068233 |
Details available
Tenda W18E V16.01.0.8(1625) suffers from authentication bypass in the web management portal allowing an unauthorized remote attacker to gain administrative access by sending a specially crafted HTTP request.
Published: 2025-02-10T00:00:00.000Z
Updated: 2025-02-10T21:47:57.677Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-46433 |
vulnerable | 2026-06-08 06:48:10.067753 |
Details available
A default credentials vulnerability in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to access the web management portal using the default rzadmin account with administrative privileges.
Published: 2025-02-10T00:00:00.000Z
Updated: 2025-02-10T21:42:55.748Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-46432 |
vulnerable | 2026-06-08 06:48:10.067274 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-46431 |
vulnerable | 2026-06-08 06:48:10.066979 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-46430 |
vulnerable | 2026-06-08 06:48:10.066438 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-46429 |
vulnerable | 2026-06-08 06:48:10.065102 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.