Cleartext Transmission Vulnerability in Tenda N301 by Tenda

CVE-2023-29681

Summary

The Tenda N301 router, specifically version 6.0 with firmware v12.03.01.06_pt, is susceptible to a cleartext transmission vulnerability. This flaw enables an authenticated local attacker to intercept vulnerable cookie communications on both LAN and WLAN. By exploiting this weakness, an attacker could gain unauthorized access to sensitive information, including the router's password, potentially compromising the security of the network. Users of this device are strongly advised to review security best practices and consider firmware updates to mitigate any associated risks.

References