CVE-2023-29681: Tenda n301 Firmware

Medium severity, CVSS 5.7. EPSS: 0.4% chance of exploitation in the next 30 days.

Cleartext Transmission in cookie:ecos_pw: in Tenda N301 v6.0, firmware v12.03.01.06_pt allows an authenticated attacker on the LAN or WLAN to intercept communications with the router and obtain the password.

Affected products

• Tenda n301 Firmware: version 12.02.01.61_multi only

Published 2023-05-01. Last modified 2026-06-17.