Unauthorized Root Access Vulnerability in Tenda W18E Devices

CVE-2024-46436

Summary

The Tenda W18E V16.01.0.8(1625) is vulnerable due to hardcoded credentials, which can be exploited by unauthenticated remote attackers. This vulnerability allows malicious actors to gain unauthorized root access to the device via the Telnet service, potentially compromising the integrity and security of the network. Users are advised to update their devices and take appropriate security measures to mitigate this risk.

References