CVE-2014-5246 The Shenzhen Tenda Technology Tenda A5s router with firmware 3.02.05_CN allows remote attackers to bypass authentication and gain administrator access by setting the admin:language cookie to zh-cn.
HighCVSS 10.0
EPSS 12.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The Shenzhen Tenda Technology Tenda A5s router with firmware 3.02.05_CN allows remote attackers to bypass authentication and gain administrator access by setting the admin:language cookie to zh-cn.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tenda a5s firmware | = 3.02.05_cn | No fix listed |
| tenda a5s | All versions | No fix listed |
References
- 110146 vdb-entry
- packetstormsecurity.com exploit
- 34361 exploit
- 69267 vdb-entry
- tenda-a5srouter-cve20145246-security-bypass(95337) vdb-entry