cbcvebase.
CVE-2024-46436
published 2025-02-10

CVE-2024-46436: Hardcoded credentials in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to gain root access to the device over the telnet service.

PriorityP353high8.3CVSS 3.1
AVAACLPRNUINSUCHIHAL
EPSS
0.45%
36.3th percentile
Hardcoded credentials in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to gain root access to the device over the telnet service.

Affected

1 ranges
VendorProductVersion rangeFixed in
tendaw18e_firmware
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.