CVE-2024-46436

PoC —

CVSS 3.1

8.3 high

EPSS

<1%p39

Published

Feb 10, 2025 (Feb 10, 2025)

Modified

Jun 17, 2026

Description

Hardcoded credentials in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to gain root access to the device over the telnet service.

Vendors: tenda
Products: w18e firmware
Weakness: CWE-798
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.