| शीर्षक | Tenda F6 (N300) Wireless Router Firmware V12.02.01.73 (Hardware V5.0) Cleartext Transmission of Sensitive Information (CWE-319) |
|---|
| विवरण | The web management interface of the Tenda F6 (N300), firmware V12.02.01.73 (HW V5.0), exposes administrator credentials through two compounding weaknesses. First, the interface is served only over HTTP with no TLS option, so the login request and session cookie are transmitted in cleartext and can be captured by passive network observation (e.g. shared Wi-Fi, ARP spoofing). Second, after authentication the session cookie "ecos_pw" stores the administrator password encoded with Base64, which is trivially reversible (for example, ecos_pw=YWRtaW4= decodes to the plaintext password). An attacker on the local network can capture the cookie, recover the administrator password, and authenticate to obtain full administrative control. This was confirmed by recovering the credential from the cookie and successfully logging in. Confirmed on V12.02.01.73 (HW V5.0); the current release V12.02.02.77 was not tested and should be verified by the vendor. |
|---|
| स्रोत | ⚠️ https://github.com/0xWKZER/tenda-f6-vulnerabilities/edit/main/02-Cleartext_Transmission.md |
|---|
| उपयोगकर्ता | WKZER (UID 100459) |
|---|
| सबमिशन | 09/10/2026 05:11 PM (14 दिन पहले) |
|---|
| संयम | 23/10/2026 04:57 PM (14 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 425975 [Tenda F6 12.02.01.73 Web Management Interface ecos_pw कमजोर एन्क्रिप्शन] |
|---|
| अंक | 20 |
|---|