Tenda W18E Hardcoded Credentials Vulnerability Allowing Unauthenticated Access to Web Management Portal

A vulnerability exists in the Tenda W18E router, specifically in version V16.01.0.8(1625), due to hardcoded credentials that allow unauthenticated remote attackers to access the web management portal. This is achieved by using a default guest account that has administrative privileges.

Impact

Exploitation of this vulnerability allows for unauthorized access to the router's web management portal with administrative rights, potentially leading to further configuration changes or management of the device.