The vulnerability of the microprogrammed software of Tenda W3002R, A302, and W309R lies in the lack of proper cookie file handling, which allows attackers to carry out spoofing attacks.

The vulnerability of the microprogrammed software of Tenda W3002R, A302, and W309R lies in the lack of proper cookie file handling. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks by sending specially crafted GET requests to the final destination /goform/AdvSetD...