CVE-2024-46432

Summary

CVE-2024-46432 is a newly disclosed vulnerability affecting Tenda W18E routers running version V16.01.0.8(1625). The issue involves Incorrect Access Control, which allows unauthorized access to WiFi configuration settings and administrative credentials. An attacker can exploit this vulnerability by sending a maliciously crafted HTTP POST request to the setQuickCfgWifiAndLogin function. Successful exploitation may result in unauthorized changes to the WiFi network configuration and compromise of administrative credentials. Users are strongly encouraged to update their devices to the latest firmware to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.