$ cve CVE-2020-35391 JSON

CVE-2020-35391 EXPLOIT

9.6

CRITICAL · CVSS 3.1 · EPSS 35.2% (pctl 98)

Patch early

A public exploit exists.

Description

Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information (possibly including an http_passwd line) via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg, a related issue to CVE-2017-14942. NOTE: the vulnerability report may suggest that either a ? character must be placed after the RouterCfm.cfg filename, or that the HTTP request headers must be unusual, but it is not known why these are relevant to the device's HTTP response behavior.

Scoring

CVSS	9.6 (CRITICAL, v3.1)
Vector	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS	35.25% — more likely to be exploited than 98% of all CVEs
Weakness	CWE-425
On CISA KEV	no
Public exploit	yes
Published	2021-01-01
Last modified	2026-06-17

Affected (2)

Vendor	Product
tenda	f3
tenda	f3 firmware

Public exploits

Source	Title	Date
exploit-db	Tenda N300 F3 12.01.01.48 - Malformed HTTP Request Header Processing	2023-04-07

References

→ the Explorer · watch your stack · NVD