CVE-2024-46436

Hardcoded credentials in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to gain root access to the device over the telnet service

High · published February 10, 2025

CVSS v3.1
8.3
EPSS
0%
Percentile
38.9
In the wild
Unconfirmed
What it is

Hardcoded credentials in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to gain root access to the device over the telnet service.

The record
Technical detail
CVSS v3.1
8.3 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00460 · 38.9th percentile
Published
2025-02-10T00:00Z
EPSS history
Timeline
  • 10 FEB 00:00Z
    Hardcoded credentials in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to gain root access to the device over the telnet service
    cvelistv5