CVE-2020-35391

Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information possibly including an httppasswd line via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg, a related issue to CVE-2017-14942. NOTE: the vulnerability report may suggest that either a ? character must b...

CVE-2020-35391

CVE-2020-35391 affects Tenda N300 F3 firmware 12.01.01.48. A remote attacker can obtain sensitive information by directly requesting cgi-bin/DownloadCfg/RouterCfm.cfg, a vulnerability related to CVE-2017-14942 (authentication/config exposure via HTTP handling). Exploit code exists (Exploit-DB ent...