CVE-2021-47802

HIGH

Tenda D151 & D301 - Configuration Download

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2021-47802 has a selected CVSS score of 8.7 (high); EIP currently links 1 catalogued exploit.

Description

Tenda D151 and D301 routers contain an unauthenticated configuration download vulnerability that allows remote attackers to retrieve router configuration files. Attackers can send a request to /goform/getimage endpoint to download configuration data including admin credentials without authentication.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationPoC
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 22, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Tenda D151 & D301

Browse Shenzhen Tenda Technology Co.,Ltd. / Tenda D151 & D301
CVE List-affected

Proofs of concept

1

Catalogued exploits

ExploitDBTenda D151 & D301 - Configuration Download (Unauthenticated)ExploitDB exploitby BenChaliahNot analyzed1 file
ExploitDB
PoC details

References

4