CVE-2024-46433

State: Published
Severity: 8.8 High
Published: Feb 10, 2025
Updated: Feb 10, 2025
Reserved: Sep 11, 2024

Description

A default credentials vulnerability in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to access the web management portal using the default rzadmin account with administrative privileges.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-798 Use of Hard-coded Credentials

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://reddassolutions.com/blog/tenda_w18e_security_research

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.