Executive Summary

This vulnerability involves the Tenda N300 F3 (V603) device's UART debug console, which is unauthenticated and accessible to anyone physically near the device.

An attacker can exploit missing authentication on the read/write memory commands (rr/wr) in this console to access stored WPA2 credentials in cleartext.

Additionally, the attacker can read or write arbitrary memory via the serial console, potentially compromising the device further.

Useful 0 Not Useful 0

Impact Analysis

A physically proximate attacker can obtain your WPA2 credentials in cleartext, which compromises your wireless network security.

With access to these credentials, the attacker could connect to your network, intercept traffic, or launch further attacks.

The ability to read or write arbitrary memory via the serial console could allow the attacker to alter device behavior or extract sensitive information.

Useful 0 Not Useful 0