CVE-2020-35391
82Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck and has a public proof of concept.
ssvc Actcvss 9.6epss 35%
from disclosure to weapon765 days
Published on NVDJan 1
1st PoC+765d
VulnCheck+1356d
exploitation probability
35%top 2% of all CVEs
observed exploitation
yesVulnCheck
8 public exploit(s)
Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information (possibly including an http_passwd line) via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg, a related issue to CVE-2017-14942. NOTE: the vulnerability report may suggest that either a ? character must be placed after the RouterCfm.cfg filename, or that the HTTP request headers must be unusual, but it is not known why these are relevant to the device's HTTP response behavior.
CVSS:3.1/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:C/UI:N
Affected products
n/a · n/apublic PoCs found — 8
exploitdbwww.exploit-db.com/exploits/51317unverifiedgithubgithub.com/4d000/Tenda-F3-V4★ 3githubgithub.com/H454NSec/CVE-2020-35391★ 2githubgithub.com/dumitory-dev/CVE-2020-35391-POC★ 2vulncheckvulncheck.com/xdb/1055dcfa6110unverifiedcve_referencepacketstormsecurity.com/files/171773/Tenda-N300-F3-12.01.01.48-Header-Processing.htmlunverifiedvulncheckvulncheck.com/xdb/c5e1a715a137unverifiedvulncheckvulncheck.com/xdb/0da2a46ef986unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.