← Vulnerability feed

Vulnerability record · CVE-2025-3203 · published 4 April 2025

CVE-2025-3203: Tenda w18e firmware memory buffer overflow vulnerability

Tenda · W18e Firmware

A vulnerability classified as problematic was found in Tenda W18E 16.01.0.11. Affected by this vulnerability is the function formSetAccountList of the file /goform/setModules. The manipulation of the argument Password leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

5.3 CVSS 4.0 Medium EPSS 0.58% · top 53.3% CWE-119 · Memory buffer overflowCWE-121 · Stack-based buffer overflow
5.3CVSS 4.0 base score, v2 4.0
0.58%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
17 Jun 2026Last modified by NVD

Description

A vulnerability classified as problematic was found in Tenda W18E 16.01.0.11. Affected by this vulnerability is the function formSetAccountList of the file /goform/setModules. The manipulation of the argument Password leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/ZIKH26/tmp_store_reports/blob/main/tenda-w18e.md Broken Link
https://vuldb.com/?ctiid.303157 Permissions RequiredVDB Entry
https://vuldb.com/?id.303157 Third Party AdvisoryVDB Entry
https://vuldb.com/?submit.545883 Third Party AdvisoryVDB Entry
https://www.tenda.com.cn/ Product
https://github.com/ZIKH26/tmp_store_reports/blob/main/tenda-w18e.md Broken Link

Track CVE-2025-3203 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2025-45343Tenda w18e firmware improper access control vulnerabilityAn issue in Tenda W18E v.2.0 v.16.01.0.11 allows an attacker to execute arbitrary code via the editing functionality of the account module in the gof…EPSS 0.64%9.8CVE-2023-46370Tenda w18e firmware command injection vulnerabilityTenda W18E V16.01.0.8(1576) has a command injection vulnerability via the hostName parameter in the formSetNetCheckTools function.EPSS 18%9.8CVE-2023-46369Tenda w18e firmware out-of-bounds write vulnerabilityTenda W18E V16.01.0.8(1576) contains a stack overflow vulnerability via the portMirrorMirroredPorts parameter in the formSetNetCheckTools function.EPSS 0.90%8.8CVE-2024-46433Tenda w18e firmware hard-coded credentials vulnerabilityA default credentials vulnerability in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to access the web management portal using …EPSS 0.54%8.8CVE-2024-46429Tenda w18e firmware hard-coded credentials vulnerabilityA hardcoded credentials vulnerability in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to access the web management portal usin…EPSS 0.59%8.8CVE-2024-46434Tenda w18e firmware improper authentication vulnerabilityTenda W18E V16.01.0.8(1625) suffers from authentication bypass in the web management portal allowing an unauthorized remote attacker to gain administ…EPSS 0.91%8.8CVE-2024-46432Tenda w18e firmware improper access control vulnerabilityTenda W18E V16.01.0.8(1625) is vulnerable to Incorrect Access Control. An attacker can send a specially crafted HTTP POST request to the setQuickCfgW…EPSS 0.64%8.3CVE-2024-46436Tenda w18e firmware hard-coded credentials vulnerabilityHardcoded credentials in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to gain root access to the device over the telnet servic…EPSS 0.46%

Source: NIST National Vulnerability Database (record CVE-2025-3203), CISA KEV, FIRST EPSS (scores of 2026-10-14). This page is refreshed as NVD updates the record.