Tenda Wireless Routers Insecure Transmission of Credentials Vulnerability

A vulnerability exists in Tenda wireless routers, specifically the 300Mbps Wireless Router F3 and the N300 Easy Setup Router, due to the transmission of credentials encoded in reversible Base64 through the web-based administrative interface. This flaw allows an attacker on the same network to intercept and decode the Base64-encoded credentials, potentially leading to unauthorized access to the device.

Impact

Exploitation of this vulnerability could result in the unauthorized access to the affected router, allowing an attacker to compromise sensitive configuration information.

Remediation

Users are advised to apply the updates mentioned by the vendor. For more information, visit the Tenda India website.