PT-2026-2150 · Tenda · Tenda N300 Easy Setup Router+1

CVE-2026-22082 · Publicado 2026-01-09 · Atualizado 2026-01-09

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:P/A:P

Name of the Vulnerable Software and Affected Versions Tenda 300Mbps Wireless Router F3 Tenda N300 Easy Setup Router

Description The routers are susceptible to a flaw stemming from the use of login credentials as the session ID via the web-based administrative interface. A remote attacker could exploit this by intercepting network traffic and capturing the session ID during insecure transmission. Successful exploitation may allow an attacker to hijack an authenticated session and compromise sensitive configuration information on the targeted device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Session Fixation

Enumeração de Fraquezas

CWE-384

Identificadores relacionados

BDU:2026-01037

CVE-2026-22082

Produtos afetados

Tenda 300Mbps Wireless Router F3

Tenda N300 Easy Setup Router

Referências · 6

• https://t.me/CVEtracker/41843 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2026-01037 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2026-22082 · Nota de Segurança
• https://github.com/advisories/GHSA-m6m8-c4cv-c66j · Nota
• https://twitter.com/CVEnew/status/2009593987280281625 · Publicação no Twitter
• https://cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0004 · Nota