Tenda n301 Firmware vulnerabilities

3 CVEs affecting Tenda n301 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-29681, published 2023-05-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-16288, published 2019-09-13. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. On Tenda N301 wireless routers, a long string in the wifiSSID parameter of a goform/setWifi POST request causes the device to crash.
CVE-2023-29681, published 2023-05-01. Medium severity, CVSS 5.7. EPSS: 0.4% chance of exploitation in the next 30 days. Cleartext Transmission in cookie:ecos_pw: in Tenda N301 v6.0, firmware v12.03.01.06_pt allows an authenticated attacker on the LAN or WLAN to intercept communications with the router and obtain the…
CVE-2023-29680, published 2023-05-01. Medium severity, CVSS 5.7. EPSS: 0.4% chance of exploitation in the next 30 days. Cleartext Transmission in set-cookie:ecos_pw: Tenda N301 v6.0, Firmware v12.02.01.61_multi allows an authenticated attacker on the LAN or WLAN to intercept communications with the router and obtain…