Tenda Wireless Routers Session Cookie Vulnerability

A vulnerability exists in Tenda wireless routers, specifically the 300Mbps Wireless Router F3 and the N300 Easy Setup Router, due to the absence of the HTTPOnly flag in session cookies related to the web-based administrative interface. This flaw allows remote attackers to capture session cookies sent over an unsecured HTTP connection. Exploitation of this vulnerability could lead to the interception of sensitive information and unauthorized access to the affected device.

Impact

Successful exploitation allows attackers to capture session cookies, potentially leading to unauthorized access on the affected device.

Remediation

Users are advised to apply the updates mentioned by the vendor. For more information, visit the Tenda India website.