Showing 1 vulnerability on this page for Tenda D151 & D301

Signals CISA KEV Ransomware Nuclei
Shenzhen Tenda Technology Co.,Ltd. vulnerability results
VulnerabilityTitle and contextCVSSEPSSPoCsSignalsSTIX action

Tenda D151 & D301 - Configuration Download

Tenda D151 and D301 routers contain an unauthenticated configuration download vulnerability that allows remote attackers to retrieve router configuration files. Attackers can send a request to /goform/getimage endpoint to download configuration data including admin credentials without authentication.

CWE-306Jan 21, 2026
CVSS8.7v4.0EPSS0.612%PoCs1SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX