CVE-2015-5995
CRITICALMediabridge Medialink MWN-WAPR300N/Tenda N3 - Auth Bypass
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2015-5995. PoCs published by Mandeep Jadon, shaheemirza.
AI-analyzed exploit summary This exploit demonstrates an authentication bypass vulnerability in Tenda N3 Wireless N150 routers by forging a static cookie value. The router uses a predictable cookie for authentication, allowing unauthorized access to the admin account without credentials.
Description
Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 and Tenda N3 Wireless N150 devices allow remote attackers to obtain administrative access via a certain admin substring in an HTTP Cookie header.
Exploits (2)
This exploit demonstrates an authentication bypass vulnerability in Tenda N3 Wireless N150 routers by forging a static cookie value. The router uses a predictable cookie for authentication, allowing unauthorized access to the admin account without credentials.
This PoC exploits CVE-2015-5995, an authentication bypass vulnerability in Tenda and Medialink routers, by sending a crafted HTTP request with an 'admin' substring in the Cookie header to extract administrative and WiFi passwords from the router's configuration file.
References (1)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H