What’s Vulnerable › Vulnerabilities

CVE-2023-29681

• Severity: medium (CVSS 5.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-05-01 · updated 2026-06-17
• Weakness: CWE-319

Description

Cleartext Transmission in cookie:ecos_pw: in Tenda N301 v6.0, firmware v12.03.01.06_pt allows an authenticated attacker on the LAN or WLAN to intercept communications with the router and obtain the password.

Affected products

• Tenda N301 Firmware: 12.02.01.61_multi

References

• https://medium.com/%400ta/tenda-n301-v6-cve-2023-29680-cve-2023-29681-a40f7ae6dc62
• https://www.youtube.com/watch?v=Xy9_hmpvvA4&ab_channel=0ta
• https://medium.com/%400ta/tenda-n301-v6-cve-2023-29680-cve-2023-29681-a40f7ae6dc62
• https://www.youtube.com/watch?v=Xy9_hmpvvA4&ab_channel=0ta

Get alerted when CVE-2023-29681 or the next vulnerability affects your stack