Tenda router allows unauthenticated users to download the configuration file containing sensitive credentials via the /cgi-bin/DownloadCfg/RouterCfm.jpg endpoint.
Log in to view the POC file snapshot cached by Shenlong Bot
Log in to view