Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An incorrect access control vulnerability exists in Tenda W15E V02.03.01.26_cn. An unauthenticated attacker can access the /cgi-bin/DownloadCfg/RouterCfm.jpg endpoint to download the configuration file containing plaintext administrator credentials, leading to sensitive information disclosure and potential remote administrative access.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Tenda W15E 安全漏洞
Vulnerability Description
Tenda W15E是中国腾达(Tenda)公司的一款无线路由器。 Tenda W15E V02.03.01.26_cn版本存在安全漏洞,该漏洞源于访问控制不当,可能导致未经验证的攻击者下载包含明文管理员凭据的配置文件,进而导致信息泄露和潜在的远程管理访问。
CVSS Information
N/A
Vulnerability Type
N/A