CVE-2024-46429

CWE-798 — Hard-coded Credentials3 documents3 sources

Severity

8.8HIGH

EPSS

0.2%

top 57.63%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Tenda W18e Firmware

Timeline

PublishedFeb 10

Description

A hardcoded credentials vulnerability in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to access the web management portal using a default guest account with administrative privileges.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages1 packages

▶NVDtenda/w18e_firmware16.01.0.8\(1625\)

🔴Vulnerability Details

CVEList

CVE-2024-46429: A hardcoded credentials vulnerability in Tenda W18E V16↗2025-02-10

▶

GHSA

GHSA-q5ph-qwr3-x59h: A hardcoded credentials vulnerability in Tenda W18E V16↗2025-02-10

▶