CVE-2024-46434

Summary

CVE-2024-46434 is a recently disclosed vulnerability affecting the Tenda W18E V16.01.0.8(1625) firmware. The issue permits unauthorized remote access to the device's administrative panel, bypassing the authentication process. An attacker can exploit this vulnerability by sending a carefully crafted HTTP request, granting them full administrative control over the affected device. This vulnerability represents a significant risk, as unauthorized access can lead to data theft, unauthorized modifications, and other malicious activities. Users are urged to update their firmware to a patched version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.