cbcvebase.
CVE-2015-5995
published 2015-12-31

CVE-2015-5995: Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 and Tenda N3 Wireless N150 devices allow remote attackers to obtain administrative access via…

PriorityP271critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
EXPLOIT
EPSS
19.06%
97.0th percentile
Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 and Tenda N3 Wireless N150 devices allow remote attackers to obtain administrative access via a certain admin substring in an HTTP Cookie header.

Affected

1 ranges
VendorProductVersion rangeFixed in
mediabridgemedialink_mwn-wapr300n_firmware<= 5.07.50—

Detection & IOCsextracted from sources · hover to see the quote

cookieadmin:language=en↗
  • →Detect HTTP requests containing the static forged cookie 'admin:language=en' targeting router admin interfaces, which indicates an authentication bypass attempt against Tenda N3 / Medialink MWN-WAPR300N devices. ↗
  • →Flag any HTTP Cookie header containing the substring 'admin' as a potential exploitation attempt per the NVD description of this CVE. ↗
  • ·Vulnerability is confirmed on firmware version 5.07.50 for Mediabridge Medialink MWN-WAPR300N; Tenda N3 Wireless N150 devices are also affected. Detections should be scoped to these device types/firmware. ↗

CVSS provenance

nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
vendor_redhat5.5MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.