CVE-2023-29680

Severity: medium (CVSS 5.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2023-05-01 · updated 2026-06-17
Weakness: CWE-319

Description

Cleartext Transmission in set-cookie:ecos_pw: Tenda N301 v6.0, Firmware v12.02.01.61_multi allows an authenticated attacker on the LAN or WLAN to intercept communications with the router and obtain the password.

Affected products

Tenda N301 Firmware: 12.03.01.06_pt

References

https://medium.com/%400ta/tenda-n301-v6-cve-2023-29680-cve-2023-29681-a40f7ae6dc62
https://www.youtube.com/watch?v=m7ZHfFcSKpU&ab_channel=0ta
https://medium.com/%400ta/tenda-n301-v6-cve-2023-29680-cve-2023-29681-a40f7ae6dc62
https://www.youtube.com/watch?v=m7ZHfFcSKpU&ab_channel=0ta

Get alerted when CVE-2023-29680 or the next vulnerability affects your stack