PT-2014-6362 · Tenda · Tenda A5S

Publicado 2014-08-22 · Atualizado 2017-09-08 · CVE-2014-5246

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Tenda A5s router version 3.02.05 CN

Description The issue allows remote attackers to bypass authentication and gain administrator access. This is achieved by setting the admin:language cookie to zh-cn, allowing unauthorized access to the router's administrative interface.

Recommendations For Tenda A5s router version 3.02.05 CN, consider disabling remote access to the administrative interface until a patch is available. Restrict access to the router's configuration to minimize the risk of exploitation. Avoid using the admin:language cookie with the value zh-cn in the affected router's firmware until the issue is resolved.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-5246

Produtos afetados

Tenda A5S

Referências · 7

• 🔥 http://exploit-db.com/exploits/34361 · Exploit
• 🔥 http://packetstormsecurity.com/files/127905/Tenda-A5s-Router-Authentication-Bypass.html · Exploit
• 🔥 https://exploit-db.com/exploits/34361 · Exploit
• http://securityfocus.com/bid/69267 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95337 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-5246 · Nota de Segurança
• http://osvdb.org/show/osvdb/110146 · Nota