CVE Feed

    Dashboard / CVE / CVE-2020-35391

    CVE-2020-35391

    Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information (possibly including an http_passwd line) via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg, a related issue to CVE-2017-14942. NOTE: the vulnerability report may suggest that either a ? character must be placed after the RouterCfm.cfg filename, or that the HTTP request headers must be unusual, but it is not known why these are relevant to the device's HTTP response behavior.

    Published:Jan 1, 2021
    Last Modified:Nov 21, 2024
    EPS:Jan 1, 2021
    EPSS Score:0.16956
    CVSS Score:9.6

    Affected Products

    Vendor
    Tenda
    Product
    F3
    Vendor
    Tenda
    Product
    F3 Firmware

    Exploits

    https://www.exploit-db.com/exploits/51317https://github.com/4d000/Tenda-F3-V4https://github.com/dumitory-dev/CVE-2020-35391-POChttps://github.com/H454NSec/CVE-2020-35391

    Related CVEs

    CVE-2026-27514 (CVSS 7.1) — Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a sensitive information exposure vulner…
    CVE-2026-27513 (CVSS 5.1) — Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a cross-site request forgery (CSRF) vul…
    CVE-2026-27512 (CVSS 5.1) — Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a content-type confusion vulnerability …
    CVE-2026-27511 (CVSS 5.1) — Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a clickjacking vulnerability in the web…
    CVE-2026-22082 (CVSS 8.8) — This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup Router) du…
    CVE-2026-22081 (CVSS 8.8) — This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup Router) du…
    CVE-2026-22080 (CVSS 8.7) — This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup Router) du…
    CVE-2026-22079 (CVSS 8.7) — This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup Router) du…
    CVE-2025-57571 (CVSS 5.6) — Tenda F3 V12.01.01.48_multi and after is vulnerable to Buffer Overflow. via the macFilterList parameter in gof…
    CVE-2025-57572 (CVSS 5.6) — Tenda F3 V12.01.01.48_multi and after is vulnerable to Buffer Overflow via the onlineList parameter in goform/…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High