Medium severity · published Feb 10, 2025
CVE-2024-46430
Tenda W18E V16.01.0.8(1625) is vulnerable to Incorrect Access Control
6.5
CVSS
0.8%
EPSS
No
On KEV
Description
Tenda W18E V16.01.0.8(1625) is vulnerable to Incorrect Access Control. Unauthorized password change via the web management portal allows an unauthenticated remote attacker to change the administrator password by sending a specially crafted HTTP POST request to the setLoginPassword function, bypassing the authentication mechanism.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 58% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WF
W18e Firmware · Tenda
16.01.0.8(1625) · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-46430
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-46430
Exploit
https://reddassolutions.com/blog/tenda_w18e_security_research
More from W18e Firmware
9.8
CVE-2025-45343
An issue in Tenda W18E v.2.0 v.16.01.0.11 allows an attacker to execute arbitrary code via the editing functionality of the account module in the goform/setmodules route
9.8
CVE-2023-46370
Tenda W18E V16.01.0.8(1576) has a command injection vulnerability via the hostName parameter in the formSetNetCheckTools function
9.8
CVE-2023-46369
Tenda W18E V16.01.0.8(1576) contains a stack overflow vulnerability via the portMirrorMirroredPorts parameter in the formSetNetCheckTools function
8.8
CVE-2024-46434
Tenda W18E V16.01.0.8(1625) suffers from authentication bypass in the web management portal allowing an unauthorized remote attacker to gain administrative access by sending a…
8.8
CVE-2024-46433
A default credentials vulnerability in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to access the web management portal using the default rzadmin account…