FH303/A300 vulnerabilities

CVEs whose affected-version data names the FH303/A300 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2018-25318Critical· 9.8PoC

5mo ago

Tenda FH303/A300 V5.07.68_EN Cookie Session Weakness DNS Change

Tenda FH303/A300 firmware V5.07.68_EN contains a session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient cookie validation. Attackers can send GET requests to the /goform/Adv…

▾ AbyssalTenda · FH303/A300EPSS 0.65%via CVEORG