Tenda W18E Firmware vulnerabilities

CVE-2025-45343 [CRITICAL] CWE-284 CVE-2025-45343: An issue in Tenda W18E v.2.0 v.16.01.0.11 allows an attacker to execute arbitrary code via the editi An issue in Tenda W18E v.2.0 v.16.01.0.11 allows an attacker to execute arbitrary code via the editing functionality of the account module in the goform/setmodules route.

CVE-2025-3203 [MEDIUM] CWE-119 CVE-2025-3203: A vulnerability classified as problematic was found in Tenda W18E 16.01.0.11. Affected by this vulne A vulnerability classified as problematic was found in Tenda W18E 16.01.0.11. Affected by this vulnerability is the function formSetAccountList of the file /goform/setModules. The manipulation of the argument Password leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used

CVE-2025-29218 [MEDIUM] CWE-121 CVE-2025-29218: Tenda W18E v2.0 v16.01.0.11 was discovered to contain a stack overflow in the wifiPwd parameter at / Tenda W18E v2.0 v16.01.0.11 was discovered to contain a stack overflow in the wifiPwd parameter at /goform/setModules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

CVE-2025-29217 [MEDIUM] CWE-121 CVE-2025-29217: Tenda W18E v2.0 v16.01.0.11 was discovered to contain a stack overflow in the wifiSSID parameter at Tenda W18E v2.0 v16.01.0.11 was discovered to contain a stack overflow in the wifiSSID parameter at /goform/setModules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

CVE-2024-46432 [HIGH] CWE-284 CVE-2024-46432: Tenda W18E V16.01.0.8(1625) is vulnerable to Incorrect Access Control. An attacker can send a specia Tenda W18E V16.01.0.8(1625) is vulnerable to Incorrect Access Control. An attacker can send a specially crafted HTTP POST request to the setQuickCfgWifiAndLogin function, which allows unauthorized changes to WiFi configuration settings and administrative credentials.

CVE-2024-46429 [HIGH] CWE-798 CVE-2024-46429: A hardcoded credentials vulnerability in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote a A hardcoded credentials vulnerability in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to access the web management portal using a default guest account with administrative privileges.

CVE-2024-46431 [HIGH] CWE-120 CVE-2024-46431: Tenda W18E V16.01.0.8(1625) is vulnerable to Buffer Overflow. An attacker with access to the web man Tenda W18E V16.01.0.8(1625) is vulnerable to Buffer Overflow. An attacker with access to the web management portal can exploit this vulnerability by sending specially crafted data to the delWewifiPic function.

CVE-2024-46435 [HIGH] CWE-121 CVE-2024-46435: A stack overflow vulnerability in the Tenda W18E V16.01.0.8(1625) web management portal allows an au A stack overflow vulnerability in the Tenda W18E V16.01.0.8(1625) web management portal allows an authenticated remote attacker to cause a denial of service or potentially execute arbitrary code. This vulnerability occurs due to improper input validation when handling user-supplied data in the delFacebookPic function.

CVE-2024-46433 [HIGH] CWE-798 CVE-2024-46433: A default credentials vulnerability in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote att A default credentials vulnerability in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to access the web management portal using the default rzadmin account with administrative privileges.

CVE-2024-46434 [HIGH] CWE-287 CVE-2024-46434: Tenda W18E V16.01.0.8(1625) suffers from authentication bypass in the web management portal allowing Tenda W18E V16.01.0.8(1625) suffers from authentication bypass in the web management portal allowing an unauthorized remote attacker to gain administrative access by sending a specially crafted HTTP request.

CVE-2024-46436 [HIGH] CWE-798 CVE-2024-46436: Hardcoded credentials in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to gain Hardcoded credentials in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to gain root access to the device over the telnet service.

CVE-2024-46430 [MEDIUM] CWE-284 CVE-2024-46430: Tenda W18E V16.01.0.8(1625) is vulnerable to Incorrect Access Control. Unauthorized password change Tenda W18E V16.01.0.8(1625) is vulnerable to Incorrect Access Control. Unauthorized password change via the web management portal allows an unauthenticated remote attacker to change the administrator password by sending a specially crafted HTTP POST request to the setLoginPassword function, bypassing the authentication mechanism.

CVE-2024-46437 [MEDIUM] CWE-200 CVE-2024-46437: A sensitive information disclosure vulnerability in the Tenda W18E V16.01.0.8(1625) web management p A sensitive information disclosure vulnerability in the Tenda W18E V16.01.0.8(1625) web management portal allows an unauthenticated remote attacker to retrieve sensitive configuration information, including WiFi SSID, WiFi password, and base64-encoded administrator credentials, by sending a specially crafted HTTP POST request to the getQuickCfgWifiA

CVE-2023-46370 [CRITICAL] CWE-77 CVE-2023-46370: Tenda W18E V16.01.0.8(1576) has a command injection vulnerability via the hostName parameter in the Tenda W18E V16.01.0.8(1576) has a command injection vulnerability via the hostName parameter in the formSetNetCheckTools function.

CVE-2023-46369 [CRITICAL] CWE-787 CVE-2023-46369: Tenda W18E V16.01.0.8(1576) contains a stack overflow vulnerability via the portMirrorMirroredPorts Tenda W18E V16.01.0.8(1576) contains a stack overflow vulnerability via the portMirrorMirroredPorts parameter in the formSetNetCheckTools function.