Advisories · Technology
Shenzhen Tenda Technology Co., Ltd. W30E V2.
Every CVE that names Shenzhen Tenda Technology Co., Ltd. W30E V2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
Tenda W30E V2 Permissive CORS Allows Cross-origin Data Access
- Shenzhen Tenda Technology Co., Ltd. W30E V2
- CWE-942
- CVSS 2.1 Low
Tenda W30E V2 Lacks X-Content-Type-Options Header
- Shenzhen Tenda Technology Co., Ltd. W30E V2
- CWE-116
- CVSS 5.1 Medium
Tenda W30E V2 Missing CSRF Protections for Administrative Actions
- Shenzhen Tenda Technology Co., Ltd. W30E V2
- Cross-site request forgery (CSRF)
- CVSS 5.1 Medium
Tenda W30E V2 Stored XSS via Username Field
- Shenzhen Tenda Technology Co., Ltd. W30E V2
- Cross-site scripting (XSS)
- CVSS 7.1 High
Tenda W30E V2 Web UI Reveals Passwords in Cleartext
- Shenzhen Tenda Technology Co., Ltd. W30E V2
- CWE-317
- CVSS 4.8 Medium
Tenda W30E V2 Missing Cache Controls for Credential-bearing Pages
- Shenzhen Tenda Technology Co., Ltd. W30E V2
- CWE-525
- CVSS 9.2 CriticalCritical · CVSS 9+
Tenda W30E V2 Lacks Rate Limiting on Authentication
- Shenzhen Tenda Technology Co., Ltd. W30E V2
- Authentication bypass
- CVSS 8.7 High
Tenda W30E V2 Incorrect Authorization Allows Administrator Password Change
- Shenzhen Tenda Technology Co., Ltd. W30E V2
- Broken access control
- CVSS 8.2 High
Tenda W30E V2 HTTP Responses Expose Plaintext Credentials
- Shenzhen Tenda Technology Co., Ltd. W30E V2
- Information disclosure
- CVSS 9.3 CriticalCritical · CVSS 9+
Tenda W30E V2 Hardcoded Default Password for Built-in Account
- Shenzhen Tenda Technology Co., Ltd. W30E V2
- CWE-1393
- CVSS 8.7 High
Tenda W30E V2 Allows Password Changes Without Verifying Current Password
- Shenzhen Tenda Technology Co., Ltd. W30E V2
- CWE-620