CVE-2026-24431

CWE-3173 documents3 sources
Severity
7.1HIGH
EPSS
0.0%
top 98.86%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Shenzhen Tenda Technology Co., Ltd. W30e V2Tenda W30e Firmware
Timeline
PublishedJan 26

Description

Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) display stored user account passwords in plaintext within the administrative web interface. Any user with access to the affected management pages can directly view credentials.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Affected Packages2 packages

▶NVDtenda/w30e_firmware16.01.0.19\(5037\)

🔴Vulnerability Details

2
GHSA
GHSA-p4q3-78m7-rm2f: Shenzhen Tenda W30E V2 firmware versions up to and including V16↗2026-01-26
▶
CVEList
Tenda W30E V2 Web UI Reveals Passwords in Cleartext↗2026-01-26
▶
CVE-2026-24431 (HIGH CVSS 7.1) | Shenzhen Tenda W30E V2 firmware ver | cvebase.io