WF
Product
W18e Firmware
15
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 7Medium 5Low 0
Watch
Add W18e Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-45343 | 9.8 | May 28 | An issue in Tenda W18E v.2.0 v.16.01.0.11 allows an attacker to execute arbitrary code via the editing functionality of the account module in the goform/setmodules route Affected: 16.01.0.11(2044) |
| CVE-2023-46370 | 9.8 | Oct 25 | Tenda W18E V16.01.0.8(1576) has a command injection vulnerability via the hostName parameter in the formSetNetCheckTools function Affected: 16.01.0.8(1576) |
| CVE-2023-46369 | 9.8 | Oct 25 | Tenda W18E V16.01.0.8(1576) contains a stack overflow vulnerability via the portMirrorMirroredPorts parameter in the formSetNetCheckTools function Affected: 16.01.0.8(1576) |
| CVE-2024-46434 | 8.8 | Feb 10 | Tenda W18E V16.01.0.8(1625) suffers from authentication bypass in the web management portal allowing an unauthorized remote attacker to gain administrative access by sending a… Affected: 16.01.0.8(1625) |
| CVE-2024-46433 | 8.8 | Feb 10 | A default credentials vulnerability in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to access the web management portal using the default rzadmin account… Affected: 16.01.0.8(1625) |
| CVE-2024-46432 | 8.8 | Feb 10 | Tenda W18E V16.01.0.8(1625) is vulnerable to Incorrect Access Control Affected: 16.01.0.8(1625) |
| CVE-2024-46429 | 8.8 | Feb 10 | A hardcoded credentials vulnerability in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to access the web management portal using a default guest account with… Affected: 16.01.0.8(1625) |
| CVE-2024-46436 | 8.3 | Feb 10 | Hardcoded credentials in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to gain root access to the device over the telnet service Affected: 16.01.0.8(1625) |
| CVE-2024-46435 | 8.0 | Feb 10 | A stack overflow vulnerability in the Tenda W18E V16.01.0.8(1625) web management portal allows an authenticated remote attacker to cause a denial of service or potentially execute… Affected: 16.01.0.8(1625) |
| CVE-2024-46431 | 8.0 | Feb 10 | Tenda W18E V16.01.0.8(1625) is vulnerable to Buffer Overflow Affected: 16.01.0.8(1625) |
| CVE-2025-29218 | 6.5 | Mar 20 | Tenda W18E v2.0 v16.01.0.11 was discovered to contain a stack overflow in the wifiPwd parameter at /goform/setModules Affected: 16.01.0.11 |
| CVE-2025-29217 | 6.5 | Mar 20 | Tenda W18E v2.0 v16.01.0.11 was discovered to contain a stack overflow in the wifiSSID parameter at /goform/setModules Affected: 16.01.0.11 |
| CVE-2024-46437 | 6.5 | Feb 10 | A sensitive information disclosure vulnerability in the Tenda W18E V16.01.0.8(1625) web management portal allows an unauthenticated remote attacker to retrieve sensitive… Affected: 16.01.0.8(1625) |
| CVE-2024-46430 | 6.5 | Feb 10 | Tenda W18E V16.01.0.8(1625) is vulnerable to Incorrect Access Control Affected: 16.01.0.8(1625) |
| CVE-2025-3203 | 4.3 | Apr 4 | A vulnerability classified as problematic was found in Tenda W18E 16.01.0.11 Affected: 16.01.0.11 |
Showing 15