CVE-2018-25317 - Vulnerability Analysis

Overview

Tenda W3002R/A302/W309R wireless routers V5.07.64_en contain a broken access control vulnerability caused by insufficient session validation in cookie handling, letting unauthenticated attackers modify DNS settings via /goform/AdvSetDns endpoint.

Severity & Score

Impact

Unauthenticated attackers can modify DNS settings, redirecting user traffic to malicious servers and enabling phishing or traffic interception.

Mitigation

Update to the latest firmware version that addresses session validation issues.

References

• https://www.exploit-db.com/exploits/44380
• https://www.vulncheck.com/advisories/tenda-w3002r-a302-w309r-64-en-cookie-session-weakness-dns-change

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner