← Back

W3002r Firmware

w3002r_firmware

Vendor: Tenda • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-25317
1Tenda
3A302 Firmware
W3002r FirmwareW309r Firmware
May 5, 2026
Apr 29, 2026
9.3 CRITICAL· v4
9.8 CRITICAL· v3
N/A· v2
Tenda W3002R/A302/W309R wireless routers version V5.07.64_en contain a cookie session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient session validation. Att...Show more
Tenda W3002R/A302/W309R wireless routers version V5.07.64_en contain a cookie session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient session validation. Attackers can send GET requests to the /goform/AdvSetDns endpoint with a crafted admin language cookie to change primary and secondary DNS servers, redirecting user traffic to malicious DNS servers.Show less