CVE-2025-57570

Tenda F3 V12.01.01.48multi and after is vulnerable to Buffer Overflow via the QosList parameter in goform/setQoS...

CVE-2025-57571

Tenda F3 V12.01.01.48multi and after is vulnerable to Buffer Overflow. via the macFilterList parameter in goform/setNAT...

CVE-2025-57572

Tenda F3 V12.01.01.48multi and after is vulnerable to Buffer Overflow via the onlineList parameter in goform/setParentControl...

MAL-2025-11418 Malicious code in @zalastax/nolb-f3 (npm)

The package @zalastax/nolb-f3 was found to contain malicious code...

Malicious code in @zalastax/nolb-f3 (npm)

The package @zalastax/nolb-f3 was found to contain malicious code...

CVE-2024-25343

Tenda N300 F3 router vulnerability allows users to bypass intended security policy and create weak passwords...

CVE-2020-35391

Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information possibly including an httppasswd line via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg, a related issue to CVE-2017-14942. NOTE: the vulnerability report may suggest that either a ? character must b...

HMS Networks Anybus X-Gateway AB7832-F3 Security Vulnerability

HMS Networks Anybus X-Gateway AB7832-F3 is an industrial gateway from HMS Networks. A security vulnerability exists in the HMS Networks Anybus X-Gateway AB7832-F3 that stems from the HICP protocol that allows unauthenticated changes to the device's network configuration...

CVE-2024-25343

Tenda N300 F3 router vulnerability allows users to bypass intended security policy and create weak passwords...

CVE-2024-25343

Tenda N300 F3 router vulnerability allows users to bypass intended security policy and create weak passwords...

CVE-2024-25343

The CVE-2024-25343 entry concerns the Tenda N300 F3 router. Affected product: Tenda N300 F3 router. Vulnerability: allows bypass of the intended security policy and enables creation of weak passwords. Root cause details are not provided in the connected documents beyond the high-severity impact (...

PT-2024-20893 · Tenda · Tenda N300 F3

Name of the Vulnerable Software and Affected Versions: Tenda N300 F3 router affected versions not specified Description: The issue allows users to bypass the intended security policy and create weak passwords. Recommendations: At the moment, there is no information about a newer version that...

CVE-2024-25343

Tenda N300 F3 router vulnerability allows users to bypass intended security policy and create weak passwords...

f3-h.de Improper Access Control vulnerability OBB-3816766

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

f3-h.de Improper Access Control vulnerability OBB-3766925

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Tenda N300 F3 12.01.01.48 Header Processing

!/usr/bin/python3 Exploit Title: Tenda N300 F3 12.01.01.48 - Malformed HTTP Request Header Processing Shodan Dork: http.favicon.hash:-2145085239 http.title:"Tenda | LOGIN" Date: 09/03/2023 Exploit Author: @h454nsec Github: https://github.com/H454NSec/CVE-2020-35391 Vendor Homepage:...

Tenda N300 F3 12.01.01.48 - Malformed HTTP Request Header Processing Exploit

!/usr/bin/python3 Exploit Title: Tenda N300 F3 12.01.01.48 - Malformed HTTP Request Header Processing Shodan Dork: http.favicon.hash:-2145085239 http.title:"Tenda | LOGIN" Exploit Author: @h454nsec Github: https://github.com/H454NSec/CVE-2020-35391 Vendor Homepage:...

Tenda N300 F3 12.01.01.48 - Malformed HTTP Request Header Processing

!/usr/bin/python3 Exploit Title: Tenda N300 F3 12.01.01.48 - Malformed HTTP Request Header Processing Shodan Dork: http.favicon.hash:-2145085239 http.title:"Tenda | LOGIN" Date: 09/03/2023 Exploit Author: @h454nsec Github: https://github.com/H454NSec/CVE-2020-35391 Vendor Homepage:...

CVE-2020-35391

Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information possibly including an httppasswd line via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg, a related issue to CVE-2017-14942. NOTE: the vulnerability report may suggest that either a ? character must b...

CVE-2020-35391

Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information possibly including an httppasswd line via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg, a related issue to CVE-2017-14942. NOTE: the vulnerability report may suggest that either a ? character must b...