CVE-2025-3203: Tenda w18e Firmware

Medium severity, CVSS 4.3. EPSS: 0.6% chance of exploitation in the next 30 days.

A vulnerability classified as problematic was found in Tenda W18E 16.01.0.11. Affected by this vulnerability is the function formSetAccountList of the file /goform/setModules. The manipulation of the argument Password leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected products

• Tenda w18e Firmware: version 16.01.0.11 only

Published 2025-04-04. Last modified 2026-06-17.