CVE-2018-25317: Tenda W3002R/A302/W309R V5.07.64_en Cookie Session Weakness DNS Change

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2026-04-29 · updated 2026-09-30
Weakness: CWE-290

Description

Tenda W3002R/A302/W309R wireless routers version V5.07.64_en contain a cookie session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient session validation. Attackers can send GET requests to the /goform/AdvSetDns endpoint with a crafted admin language cookie to change primary and secondary DNS servers, redirecting user traffic to malicious DNS servers.

Affected products

Tenda A302 Firmware: 5.07.64_en
Tenda W3002R Firmware: 5.07.64_en
Tenda W309R Firmware: 5.07.64_en

References

https://www.exploit-db.com/exploits/44380
https://www.vulncheck.com/advisories/tenda-w3002r-a302-w309r-64-en-cookie-session-weakness-dns-change

Get alerted when CVE-2018-25317 or the next vulnerability affects your stack