CVE-2026-24431
BaseFortify
Publication date: 2026-01-26
Last updated on: 2026-01-28
Assigner: VulnCheck
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| tenda | w30e_firmware | to 16.01.0.19\(5037\) (inc) |
| tenda | w30e | 2.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-317 | The product stores sensitive information in cleartext within the GUI. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037), where stored user account passwords are displayed in plaintext within the administrative web interface. This means that any user who can access the affected management pages can directly view the credentials without any encryption or protection.
How can this vulnerability impact me? :
The vulnerability can lead to unauthorized disclosure of user account passwords if an attacker or unauthorized user gains access to the administrative web interface. This could result in unauthorized access to the device, potential control over network settings, and further compromise of network security.