CVE-2025-45343

all versions

An issue in Tenda W18E v.2.0 v.16.01.0.11 allows an attacker to execute arbitrary code via the editing functionality of the accoun

9.8CRITICAL

CVE-2025-3203

all versions

A vulnerability classified as problematic was found in Tenda W18E 16.01.0.11. Affected by this vulnerability is the function formS

4.3MEDIUM

CVE-2025-29218

all versions

Tenda W18E v2.0 v16.01.0.11 was discovered to contain a stack overflow in the wifiPwd parameter at /goform/setModules. This vulner

6.5MEDIUM

CVE-2025-29217

all versions

Tenda W18E v2.0 v16.01.0.11 was discovered to contain a stack overflow in the wifiSSID parameter at /goform/setModules. This vulne

6.5MEDIUM

CVE-2024-46437

all versions

A sensitive information disclosure vulnerability in the Tenda W18E V16.01.0.8(1625) web management portal allows an unauthenticate

6.5MEDIUM

CVE-2024-46436

all versions

Hardcoded credentials in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to gain root access to the device ove

8.3HIGH

CVE-2024-46435

all versions

A stack overflow vulnerability in the Tenda W18E V16.01.0.8(1625) web management portal allows an authenticated remote attacker to

8.0HIGH

CVE-2024-46434

all versions

Tenda W18E V16.01.0.8(1625) suffers from authentication bypass in the web management portal allowing an unauthorized remote attack

8.8HIGH

CVE-2024-46433

all versions

A default credentials vulnerability in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to access the web manag

8.8HIGH

CVE-2024-46432

all versions

Tenda W18E V16.01.0.8(1625) is vulnerable to Incorrect Access Control. An attacker can send a specially crafted HTTP POST request

8.8HIGH

CVE-2024-46431

all versions

Tenda W18E V16.01.0.8(1625) is vulnerable to Buffer Overflow. An attacker with access to the web management portal can exploit thi

8.0HIGH

CVE-2024-46430

all versions

Tenda W18E V16.01.0.8(1625) is vulnerable to Incorrect Access Control. Unauthorized password change via the web management portal

6.5MEDIUM

CVE-2024-46429

all versions

A hardcoded credentials vulnerability in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to access the web man

8.8HIGH

CVE-2023-46370

all versions

Tenda W18E V16.01.0.8(1576) has a command injection vulnerability via the hostName parameter in the formSetNetCheckTools function.

9.8CRITICAL

CVE-2023-46369

all versions

Tenda W18E V16.01.0.8(1576) contains a stack overflow vulnerability via the portMirrorMirroredPorts parameter in the formSetNetChe

9.8CRITICAL