Lucene search
+L

12 matches found

NVD
NVD
added 2026/04/29 8:16 p.m.12 views

CVE-2018-25316

Tenda W308R v2 V5.07.48 contains a cookie session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient session validation. Attackers can send GET requests to the goform/AdvSetDns endpoint with a crafted admin language cookie to change DNS...

9.8CVSS0.00651EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2026/04/29 7:24 p.m.38 views

CVE-2018-25316 Tenda W308R v2 V5.07.48 Cookie Session Weakness DNS Change

Tenda W308R v2 V5.07.48 contains a cookie session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient session validation. Attackers can send GET requests to the goform/AdvSetDns endpoint with a crafted admin language cookie to change DNS...

9.8CVSS0.00651EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/04/29 7:24 p.m.8 views

EUVD-2018-21837

Tenda W308R v2 V5.07.48 contains a cookie session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient session validation. Attackers can send GET requests to the goform/AdvSetDns endpoint with a crafted admin language cookie to change DNS...

9.8CVSS5.2AI score0.00651EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/04/29 7:24 p.m.6 views

CVE-2018-25316 Tenda W308R v2 V5.07.48 Cookie Session Weakness DNS Change

Tenda W308R v2 V5.07.48 contains a cookie session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient session validation. Attackers can send GET requests to the goform/AdvSetDns endpoint with a crafted admin language cookie to change DNS...

9.8CVSS5.2AI score0.00651EPSS
SaveExploits1References2
CVE
CVE
added 2026/04/29 7:24 p.m.21 views

CVE-2018-25316

CVE-2018-25316 affects Tenda W308R v2 (firmware V5.07.48). The issue is a cookie session weakness where insufficient session validation allows unauthenticated attackers to modify DNS settings via the goform/AdvSetDns endpoint by sending a crafted admin language cookie, enabling DNS changes that r...

9.8CVSS5.3AI score0.00651EPSS
SaveExploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/29 7:24 p.m.10 views

CVE-2018-25316

Tenda W308R v2 V5.07.48 contains a cookie session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient session validation. Attackers can send GET requests to the goform/AdvSetDns endpoint with a crafted admin language cookie to change DNS...

9.8CVSS5.8AI score0.00651EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2026/04/29 12:00 a.m.18 views

Tenda W308R 安全漏洞

The Tenda W308R is a home wireless router from the Chinese company Tenda. It supports wireless network connections and routing management functions. The Tenda W308R v2 V5.07.48 version has a security vulnerability. This vulnerability stems from a Cookie session weakness, which allows unauthorized...

9.8CVSS5.8AI score0.00651EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2026/04/29 12:00 a.m.12 views

PT-2026-35999

Tenda W308R v2 V5.07.48 contains a cookie session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient session validation. Attackers can send GET requests to the goform/AdvSetDns endpoint with a crafted admin language cookie to change DNS...

9.8CVSS5.2AI score0.00651EPSS
SaveExploits1References3
exploitpack
exploitpack
added 2018/03/30 12:00 a.m.25 views

Tenda W308R v2 Wireless Router 5.07.48 - (Cookie Session) Remote DNS Change

Tenda W308R v2 Wireless Router 5.07.48 - Cookie Session Remote DNS Change Tenda W308R v2 Wireless Router V5.07.48 Cookie Session Weakness Remote DNS Change PoC Copyright 2018 c Todor Donev https://ethical-hacker.org/ https://facebook.com/ethicalhackerorg Once modified, systems use foreign DNS...

0.6AI score
SaveExploits0
Exploit DB
Exploit DB
added 2018/03/30 12:00 a.m.29 views

Tenda W308R v2 Wireless Router 5.07.48 - (Cookie Session) Remote DNS Change

Tenda W308R v2 Wireless Router V5.07.48 Cookie Session Weakness Remote DNS Change PoC Copyright 2018 c Todor Donev https://ethical-hacker.org/ https://facebook.com/ethicalhackerorg Once modified, systems use foreign DNS servers, which are usually set up by cybercriminals. Users with vulnerable...

5.3AI score
SaveExploits0
Packet Storm
Packet Storm
added 2018/03/29 12:00 a.m.37 views

Tenda W308R V2 Wireless Router 5.07.48 DNS Changer

Tenda W308R v2 Wireless Router V5.07.48 Cookie Session Weakness Remote DNS Change PoC Copyright 2018 c Todor Donev https://ethical-hacker.org/ https://facebook.com/ethicalhackerorg Once modified, systems use foreign DNS servers, which are usually set up by cybercriminals. Users with vulnerable...

0.2AI score
SaveExploits0
zdt
zdt
added 2018/03/29 12:00 a.m.36 views

Tenda W308R V2 Wireless Router 5.07.48 DNS Changer Exploit

Tenda W308R V2 wireless router version 5.07.48 remote DNS changer proof of concept exploit. Tenda W308R v2 Wireless Router V5.07.48 Cookie Session Weakness Remote DNS Change PoC Copyright 2018 c Todor Donev https://ethical-hacker.org/ https://facebook.com/ethicalhackerorg Once modified, systems u...

0.5AI score
SaveExploits0
Rows per page
Query Builder