CVE-2024-46433

A default credentials vulnerability in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to access the web management portal using the default rzadmin account with administrative privileges.

Score

CVSS 3.1 8.8 High

Status

Analyzed - cve@mitre.org

Published

2025-02-10

Last modified

2025-02-10

Weaknesses

CWE-798

Affected products

• W18e Firmware (Tenda)

References

• https://reddassolutions.com/blog/tenda_w18e_security_research