Denial of Service Vulnerability in Tenda N301 Wireless Router
CVE-2019-16412

7.5HIGH

Key Information:

Vendor

Tenda
Status
N301 Firmware
Vendor
CVE Published:
19 September 2019

What is CVE-2019-16412?

A vulnerability in the Tenda N301 wireless router allows attackers to initiate a denial of service condition by sending a malformed request that sets the WAN MTU value to zero. This parameter is only restricted through the device's graphical user interface, thus enabling an exploit via command injection. If the attacker successfully triggers this exploit, it results in the router crashing, disrupting network access for legitimate users.

References

https://github.com/Gr3gPr1est/BugReport/blob/master/CVE-2...
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.