Vulnerability Details CVE-2014-5246
The Shenzhen Tenda Technology Tenda A5s router with firmware 3.02.05_CN allows remote attackers to bypass authentication and gain administrator access by setting the admin:language cookie to zh-cn.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.262
EPSS Ranking 96.1%
CVSS Severity
CVSS v2 Score 10.0
References
- http://osvdb.org/show/osvdb/110146
- http://packetstormsecurity.com/files/127905/Tenda-A5s-Router-Authentication-Bypass.html
- http://www.exploit-db.com/exploits/34361
- http://www.securityfocus.com/bid/69267
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95337
- http://osvdb.org/show/osvdb/110146
- http://packetstormsecurity.com/files/127905/Tenda-A5s-Router-Authentication-Bypass.html
- http://www.exploit-db.com/exploits/34361
- http://www.securityfocus.com/bid/69267
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95337
Products affected by CVE-2014-5246
-
cpe:2.3:h:tenda:a5s:-
-
cpe:2.3:o:tenda:a5s_firmware:3.02.05_cn