What’s Vulnerable › Vulnerabilities

CVE-2025-45343

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-05-28 · updated 2026-07-05
• Weakness: CWE-284

Description

An issue in Tenda W18E v.2.0 v.16.01.0.11 allows an attacker to execute arbitrary code via the editing functionality of the account module in the goform/setmodules route.

Affected products

• Tenda W18E: 16.01.0.11(2044)

References

• https://gist.github.com/isstabber/b363d47966965e5c0a8ec26d445e090b
• https://www.tenda.com.cn/
• https://gist.github.com/isstabber/b363d47966965e5c0a8ec26d445e090b

Get alerted when CVE-2025-45343 or the next vulnerability affects your stack