CVE-2026-24430
BaseFortify
Publication date: 2026-01-26
Last updated on: 2026-01-28
Assigner: VulnCheck
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| tenda | w30e_firmware | to 16.01.0.19\(5037\) (inc) |
| tenda | w30e | 2.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-201 | The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor. |
Attack-Flow Graph
AI Powered Q&A
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
This vulnerability exposes sensitive account credentials in cleartext over unencrypted HTTP, which can lead to unauthorized access to sensitive authentication data. Such exposure of sensitive information can result in non-compliance with common standards and regulations like GDPR and HIPAA, which require protection of personal and sensitive data against unauthorized access and interception. [1]
Can you explain this vulnerability to me?
This vulnerability in Shenzhen Tenda W30E V2 router firmware versions up to V16.01.0.19(5037) causes sensitive account credentials to be exposed in plaintext within HTTP responses from the maintenance interface. Since the management interface uses unencrypted HTTP by default, an attacker on the network can intercept these HTTP responses and obtain the credentials without encryption. [1]
How can this vulnerability impact me? :
The vulnerability allows an attacker who can intercept network traffic to obtain sensitive authentication credentials in plaintext. This can lead to unauthorized access to the router's management interface, potentially compromising the device and the network it manages. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by monitoring HTTP traffic to the Shenzhen Tenda W30E V2 router's maintenance interface and inspecting HTTP responses for plaintext account credentials. Network packet capture tools like tcpdump or Wireshark can be used to capture HTTP traffic. For example, using tcpdump: `tcpdump -i <interface> -A port 80` to capture and display HTTP traffic on port 80, then searching for credential strings in the output. Additionally, using curl or wget to send HTTP requests to the router's management interface and inspecting the responses for exposed credentials can help detect the issue. [1]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include disabling or restricting access to the router's maintenance interface over HTTP, especially from untrusted networks. If possible, configure the device to use HTTPS for management access to encrypt credentials in transit. Additionally, update the router firmware to a version later than V16.01.0.19(5037) if available, or apply any vendor-provided patches addressing this vulnerability. Limiting network exposure by placing the device management interface behind a firewall or VPN can also reduce risk. [1]