PT-2019-14612 · Tenda · Tenda N301
Published
2019-09-13
·
Updated
2020-08-24
·
CVE-2019-16288
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Tenda N301 version (affected versions not specified)
Description
The issue occurs when a long string is sent in the
wifiSSID parameter of a "goform/setWifi" POST request, causing the device to crash.Recommendations
For the affected Tenda N301 version, as a temporary workaround, consider restricting access to the "goform/setWifi" POST request until a patch is available. Avoid using long strings in the
wifiSSID parameter to minimize the risk of device crash. At the moment, there is no information about a newer version that contains a fix for this issue.Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Tenda N301