Tenda W309R Router Cookie Authentication Bypass Vulnerability

Bugtraq ID:	62733
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 30 2013 12:00AM
Updated:	Sep 30 2013 12:00AM
Credit:	SANTHO
Vulnerable:	Tenda W309R 5.7.46
Not Vulnerable:

Tenda W309R Router Cookie Authentication Bypass Vulnerability

Tenda W309R router is prone to an authentication-bypass vulnerability.

Attackers can exploit this issue to gain authenticated access to the affected device and access sensitive information, which may aid in further attacks.

Tenda W309R running firmware 5.07.46 is vulnerable; other versions may also be affected.

Tenda W309R Router Cookie Authentication Bypass Vulnerability

An attacker can exploit this issue using a web browser.

The following exploit is available:

• /data/vulnerabilities/exploits/62733.nse.txt

Tenda W309R Router Cookie Authentication Bypass Vulnerability

References:

• Tenda W309R Router Homepage (Tenda)