VulnerabilityAnalyzed
CVE-2024-46431
Tenda W18E V16.01.0.8(1625) is vulnerable to Buffer Overflow.
HIGH 8.0EPSS 0.47%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.47%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Tenda W18E V16.01.0.8(1625) is vulnerable to Buffer Overflow. An attacker with access to the web management portal can exploit this vulnerability by sending specially crafted data to the delWewifiPic function.
- CVSS 3.1
- 8.0 HIGHCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.47% probability · 40th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-120
- Affected
- tenda/w18e firmware
- Source
- cve@mitre.org
References
- https://reddassolutions.com/blog/tenda_w18e_security_researchExploit, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.