CVE-2020-35391 Information disclosure in n/a

Critical 9.6 Published 1 Jan 2021 Updated 4 Aug 2024

Remote attackers can obtain sensitive configuration data, including passwords, by requesting a specific configuration file from the router.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2020-35391?

CVE-2020-35391 is a critical vulnerability in n/a, published on 1 Jan 2021. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information (possibly including an http_passwd line) via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg, a related issue to CVE-2017-14942. NOTE: the vulnerability report may suggest that either a ? character must be placed after the RouterCfm.cfg filename, or that the HTTP request headers must be unusual, but it is not known why these are relevant to the device's HTTP response behavior.

Weakness: CWE-425

Which versions are affected by CVE-2020-35391?

It affects 1 product.

Products include Tenda F3 Firmware.

How do I fix CVE-2020-35391?

No fix has been published for CVE-2020-35391 yet. Limit exposure of the affected software until one is available.

Is CVE-2020-35391 being exploited?

There is no known exploitation of CVE-2020-35391 in the wild and no public exploit code.

Public exploit code: 1 Exploit-DB entry and 3 proofs of concept on GitHub.

Sources

Also known as GHSA-mfx7-787g-3rp3.