Hardcoded Credentials Vulnerability in Tenda W18E Router

CVE-2024-46429

Summary

A hardcoded credentials vulnerability in Tenda W18E routers enables unauthorized remote attackers to gain access to the web management portal. The issue arises from a default guest account provisioned with administrative privileges, allowing attackers to manipulate the router settings without authentication. This vulnerability poses significant risks to network security, enabling potential exploitation by malicious actors.

References