CVE-2024-46431

CWE-120 — Classic Buffer Overflow3 documents3 sources
Severity
8.0HIGH
EPSS
0.0%
top 90.53%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Tenda W18e Firmware
Timeline
PublishedFeb 10

Description

Tenda W18E V16.01.0.8(1625) is vulnerable to Buffer Overflow. An attacker with access to the web management portal can exploit this vulnerability by sending specially crafted data to the delWewifiPic function.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.1 | Impact: 5.9

Affected Packages1 packages

▶NVDtenda/w18e_firmware16.01.0.8\(1625\)

🔴Vulnerability Details

2
GHSA
GHSA-4gr2-9449-vfcf: Tenda W18E V16↗2025-02-10
▶
CVEList
CVE-2024-46431: Tenda W18E V16↗2025-02-10
▶
CVE-2024-46431 (HIGH CVSS 8) | Tenda W18E V16.01.0.8(1625) is vuln | cvebase.io