cbcvebase.
CVE-2014-5246
published 2014-08-22

CVE-2014-5246: The Shenzhen Tenda Technology Tenda A5s router with firmware 3.02.05_CN allows remote attackers to bypass authentication and gain administrator access by…

PriorityP269critical10CVSS 2.0
AVNACLAuNCCICAC
EXPLOIT
EPSS
12.49%
95.7th percentile
The Shenzhen Tenda Technology Tenda A5s router with firmware 3.02.05_CN allows remote attackers to bypass authentication and gain administrator access by setting the admin:language cookie to zh-cn.

Affected

1 ranges
VendorProductVersion rangeFixed in
tendaa5s_firmware——

Detection & IOCsextracted from sources · hover to see the quote

cookieadmin:language=zh-cn↗
urlhttp://192.168.2.1/advance.asp↗
  • →Authentication bypass is triggered by the presence of the cookie 'admin:language' set to 'zh-cn' in HTTP requests to the Tenda A5s router admin interface. ↗
  • →Monitor HTTP requests to /advance.asp on Tenda A5s devices; presence of the cookie 'admin:language=zh-cn' without prior authenticated session indicates exploitation attempt. ↗
  • ·The default gateway IP 192.168.2.1 is used in the proof-of-concept but may differ per deployment; detection rules should match on the cookie value 'admin:language=zh-cn' regardless of destination IP. ↗
  • ·Vulnerability is confirmed only on firmware version V3.02.05_CN of the Tenda A5s router. ↗
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.