CVE-2014-5246

The Shenzhen Tenda Technology Tenda A5s router with firmware 3.02.05_CN allows remote attackers to bypass authentication and gain administrator access by setting the admin:language cookie to zh-cn.

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

12.49% chance of exploitation in the next 30 days, 96th percentile

Published

2014-08-22

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/34361

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/34361

References

• CVE Record
• NVD entry

Related

• CVE-2014-5243
• CVE-2014-5258
• CVE-2014-5240
• CVE-2014-5265
• CVE-2014-5216
• CVE-2014-5266