Tenda W18E Default Credentials Vulnerability Allowing Unauthenticated Access to Web Management Portal

A vulnerability exists in the Tenda W18E router, specifically in version V16.01.0.8(1625), due to default credentials that allow unauthenticated remote attackers to access the web management portal. The default rzadmin account, which has administrative privileges, can be used to gain access.

Impact

Exploitation of this vulnerability allows for unauthorized access to the router's web management portal with administrative rights, enabling an attacker to make changes to the router's configuration or management settings.