CVE-2024-46429

Summary

CVE-2024-46429 is a newly identified vulnerability affecting the Tenda W18E V16.01.0.8(1625) firmware. This issue involves the presence of hardcoded credentials, which grant unauthenticated attackers unrestricted access to the web management portal. The default guest account holds administrative privileges, making it a severe threat. Attackers can exploit this vulnerability to take control of the affected device, potentially leading to data theft or network intrusion. Users are strongly advised to update their devices to a secure and patched version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.