cbcvebase.

Tenda Fh303 A300 vulnerabilities

1 known vulnerability affecting tenda/fh303_a300.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2018-25318P2CRITICALCVSS 9.8v5.07.682026-04-29
CVE-2018-25318 [CRITICAL] CWE-290 CVE-2018-25318: Tenda FH303/A300 firmware V5.07.68_EN contains a session weakness vulnerability that allows unauthen Tenda FH303/A300 firmware V5.07.68_EN contains a session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient cookie validation. Attackers can send GET requests to the /goform/AdvSetDns endpoint with a crafted admin cookie to change DNS servers and redirect user traffic to malicious sites.
nvd
Tenda Fh303 A300 vulnerabilities | cvebase