CVE-2020-35391
CRITICAL EXPLOITED IN THE WILDTenda N300 F3 12.01.01.48 - Info Disclosure
Title source: llmExploitation Summary
CVE-2020-35391 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io). EIP tracks 4 public exploits from researchers including @h454nsec, 4d000, H454NSec.
AI-analyzed exploit summary This exploit targets CVE-2020-35391, an information disclosure vulnerability in Tenda N300 F3 routers. It sends a malformed HTTP request to download the router's configuration file, which contains the admin password in base64-encoded format. The script decodes and extracts the password, then saves the configuration and credentials to files.
Description
Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information (possibly including an http_passwd line) via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg, a related issue to CVE-2017-14942. NOTE: the vulnerability report may suggest that either a ? character must be placed after the RouterCfm.cfg filename, or that the HTTP request headers must be unusual, but it is not known why these are relevant to the device's HTTP response behavior.
Exploits (4)
This exploit targets CVE-2020-35391, an information disclosure vulnerability in Tenda N300 F3 routers. It sends a malformed HTTP request to download the router's configuration file, which contains the admin password in base64-encoded format. The script decodes and extracts the password, then saves the configuration and credentials to files.
This repository contains a functional Python script that exploits CVE-2020-35391, an unauthenticated file download vulnerability in Tenda F3 routers (v3/v4). The exploit allows downloading sensitive files such as configuration, system logs, and flash dumps, and extracts admin credentials from the configuration file.
The repository contains a functional Python exploit for CVE-2020-35391, targeting Tenda F3 routers. It leverages malformed HTTP headers to bypass authentication and dump configuration files, including credentials.
This repository contains a functional Python PoC for CVE-2020-35391, an authentication bypass vulnerability in Tenda N300 routers. The exploit sends a malformed HTTP request to retrieve sensitive configuration data, including the base64-encoded password, from the router's configuration file.
References (2)
Scores
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H