Vulnerability Details CVE-2024-46432
Tenda W18E V16.01.0.8(1625) is vulnerable to Incorrect Access Control. An attacker can send a specially crafted HTTP POST request to the setQuickCfgWifiAndLogin function, which allows unauthorized changes to WiFi configuration settings and administrative credentials.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 18.0%
CVSS Severity
CVSS v3 Score 8.8
Products affected by CVE-2024-46432
-
cpe:2.3:h:tenda:w18e:-
-
cpe:2.3:o:tenda:w18e_firmware:16.01.0.8(1625)