Beveiligingsadvies

CVE-2018-25316

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-29 19:24:44

Laatst bijgewerkt 2026-07-15 01:23:33

Toegewezen door VulnCheck

CVSS-score 9.8

Status PUBLISHED

Beschrijving

Tenda W308R v2 V5.07.48 contains a cookie session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient session validation. Attackers can send GET requests to the goform/AdvSetDns endpoint with a crafted admin language cookie to change DNS servers and redirect user traffic to malicious sites.

← Alle CVE's bekijken Bekijk op cve.org ↗