CVE-2026-24437

Katalog CVE

CVSS 5.5 · Medium EPSS 0,17%

Kerentanan Use of Web Browser Cache Containing Sensitive Information pada tenda w30e firmware. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) serve sensitive administrative content without appropriate cache-control directives. As a result, browsers may store credential-bearing responses locally, exposing them to subsequent unauthorized access.

Rincian

Terbit di NVD

26 Januari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-525: Use of Web Browser Cache Containing Sensitive Information

EPSS (30 hari)

0,17% peluang dieksploitasi; lebih tinggi dari 6,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.vulncheck.com/advisories/tenda-w30e-v2-missing-cache-controls-for-credential-bearing-pages advisory pihak ketiga
• https://www.tendacn.com/product/W30E product