Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2018-25318

Tenda FH303/A300 firmware V5.07.68_EN contains a session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient cookie validation. Attackers can send GET requests to the /goform/AdvSetDns endpoint with a crafted admin cookie to change DNS servers and redirect user traffic to malicious sites.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 13.1%
CVSS Severity
CVSS v3 Score 9.8
Products affected by CVE-2018-25318
  • Tenda » A300 » Version: N/A
    cpe:2.3:h:tenda:a300:-
  • Tenda » Fh303 » Version: N/A
    cpe:2.3:h:tenda:fh303:-
  • Tenda » A300 Firmware » Version: 5.07.68_en
    cpe:2.3:o:tenda:a300_firmware:5.07.68_en
  • Tenda » Fh303 Firmware » Version: 5.07.68_en
    cpe:2.3:o:tenda:fh303_firmware:5.07.68_en


Products
Pricing
Contact Us

Shodan ® - All rights reserved