CVE-2026-24437 | BDVDB-2026-312486 Detail
Shenzhen Tenda TechnologyW30E V2
Description#
Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) serve sensitive administrative content without appropriate cache-control directives. As a result, browsers may store credential-bearing responses locally, exposing them to subsequent unauthorized access.
Impact#
Per CVSS v4.0: confidentiality impact low, integrity impact none, availability impact none. Attack vector: local.
Weaknesses#
- CWE-525 Use of Web Browser Cache Containing Sensitive Information
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.