← All advisories

Critical severity9.8NVD Advisory· Published Oct 25, 2023· Updated Jun 17, 2026

CVE-2023-46370

CVE-2023-46370

Description

Tenda W18E V16.01.0.8(1576) has a command injection vulnerability via the hostName parameter in the formSetNetCheckTools function.

Affected products

3

Tenda/W18e Firmware
cpe:2.3:o:tenda:w18e_firmware:16.01.0.8\(1576\):*:*:*:*:*:*:*
Tenda/W18Ecpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: = V16.01.0.8(1576)

Patches

Vulnerability mechanics

References

1

github.com/Archerber/bug_submit/blob/main/Tenda/W18E/bug2.mdnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.