CVE-2020-35391
Quick assessment
Affected
n/a n/a
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Tenda N300是中国腾达（Tenda）公司的一款路由器。 Tenda N300 F3 12.01.01.48 存在安全漏洞，该漏洞允许远程攻击者可利用该漏洞通过直接请求cgi-bin DownloadCfg RouterCfm获取敏感信息(可能包括http密码行)。
Public Exploits 1
ExploitDB · 1
EDB-51317 [remote]
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2020-35391
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information (possibly including an http_passwd line) via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg, a related issue to CVE-2017-14942. NOTE: the vulnerability report may suggest that either a ? character must be placed after the RouterCfm.cfg filename, or that the HTTP request headers must be unusual, but it is not known why these are relevant to the device's HTTP response behavior.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Tenda N300 资源管理错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Tenda N300是中国腾达（Tenda）公司的一款路由器。 Tenda N300 F3 12.01.01.48 存在安全漏洞，该漏洞允许远程攻击者可利用该漏洞通过直接请求cgi-bin DownloadCfg RouterCfm获取敏感信息(可能包括http密码行)。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2020-35391
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | Tenda N300 Authentication Bypass via Malformed HTTP Request Header | https://github.com/dumitory-dev/CVE-2020-35391-POC | POC Details |
| 2 | Tenda f3 Malformed HTTP Request Header Processing Vulnerability. | https://github.com/H454NSec/CVE-2020-35391 | POC Details |
| 3 | A Python tool for exploiting CVE-2020-35391 on Tenda F3 V3 and F3 V4 routers, allowing unauthorized access to config, flash, and syslog files. Automates the process of downloading hidden files from the router. | https://github.com/4d000/Tenda-F3-V4 | POC Details |
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-35391
请登录查看更多情报信息。
Exploits & Public PoCs for CVE-2020-35391 (1)
Security Blog Posts for CVE-2020-35391 (1)
Same Patch Batch · n/a · 2021-01-01 · 19 CVEs total
| CVE-2020-35949 | 10.0 CRITICAL | WordPress Quiz and Survey Master plugin 安全漏洞 |
| CVE-2020-35945 | 9.9 CRITICAL | WordPress 代码问题漏洞 |
| CVE-2020-35948 | 9.9 CRITICAL | WordPress XCloner Backup and Restore plugin 安全漏洞 |
| CVE-2020-35951 | 9.9 CRITICAL | WordPress Quiz and Survey Master plugin 安全漏洞 |
| CVE-2020-35950 | 9.8 CRITICAL | WordPress XCloner Backup and Restore plugin 跨站请求伪造漏洞 |
| CVE-2020-35944 | 8.8 HIGH | WordPress 跨站请求伪造漏洞 |
| CVE-2020-35932 | 7.5 HIGH | WordPress Newsletter plugin 代码问题漏洞 |
| CVE-2020-35935 | 7.5 HIGH | WordPress 访问控制错误漏洞 |
| CVE-2020-35936 | 7.5 HIGH | WordPress 跨站脚本漏洞 |
| CVE-2020-35937 | 7.5 HIGH | WordPress Team Showcase plugin 跨站脚本漏洞 |
| CVE-2020-35938 | 7.5 HIGH | WordPress 注入漏洞 |
| CVE-2020-35939 | 7.5 HIGH | WordPress 代码问题漏洞 |
| CVE-2020-35947 | 7.4 HIGH | WordPress 授权问题漏洞 |
| CVE-2020-35933 | 6.5 MEDIUM | WordPress 跨站脚本漏洞 |
| CVE-2020-35946 | 5.4 MEDIUM | WordPress 跨站脚本漏洞 |
| CVE-2020-35934 | 4.3 MEDIUM | WordPress 处理逻辑错误漏洞 |
| CVE-2020-35717 | Zonetti Zonote 跨站脚本漏洞 | |
| CVE-2021-3002 | SEO Panel 跨站脚本漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2020-35391
No comments yet