Executive Summary

This vulnerability exists in certain Tenda wireless routers because the session cookies used by the web-based administrative interface lack the HTTPOnly flag. This means that an attacker could capture these session cookies if they intercept the HTTP traffic, potentially allowing them to hijack the session and gain unauthorized access to the router's administrative functions.

Useful 0 Not Useful 0

Impact Analysis

If exploited, this vulnerability could allow an attacker to obtain sensitive information by capturing session cookies and gain unauthorized access to the targeted Tenda wireless router. This could lead to control over the device, potentially compromising network security and privacy.

Useful 0 Not Useful 0