← Back

Fh303 Firmware

fh303_firmware

Vendor: Tenda • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-25318
1Tenda
2A300 Firmware
Fh303 Firmware
May 4, 2026
Apr 29, 2026
9.3 CRITICAL· v4
9.8 CRITICAL· v3
N/A· v2
Tenda FH303/A300 firmware V5.07.68_EN contains a session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient cookie validation. Attackers can send GET requests t...Show more
Tenda FH303/A300 firmware V5.07.68_EN contains a session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient cookie validation. Attackers can send GET requests to the /goform/AdvSetDns endpoint with a crafted admin cookie to change DNS servers and redirect user traffic to malicious sites.Show less