Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q6w4-grhv-wcp8

Опубликовано: 23 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 5.1
CVSS3: 4.3

Описание

Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a clickjacking vulnerability in the web-based administrative interface. The interface does not set the X-Frame-Options header, allowing attacker-controlled sites to embed administrative pages in an iframe and trick an authenticated administrator into unintended interactions that may result in unauthorized configuration changes.

Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a clickjacking vulnerability in the web-based administrative interface. The interface does not set the X-Frame-Options header, allowing attacker-controlled sites to embed administrative pages in an iframe and trick an authenticated administrator into unintended interactions that may result in unauthorized configuration changes.

EPSS

Процентиль: 11%
0.00207
Низкий

5.1 Medium

CVSS4

4.3 Medium

CVSS3

Дефекты

CWE-1021

Связанные уязвимости

CVSS3: 4.3
nvd
6 месяцев назад

Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a clickjacking vulnerability in the web-based administrative interface. The interface does not set the X-Frame-Options header, allowing attacker-controlled sites to embed administrative pages in an iframe and trick an authenticated administrator into unintended interactions that may result in unauthorized configuration changes.

CVSS3: 4.3
fstec
6 месяцев назад

Уязвимость веб-интерфейса администрирования микропрограммного обеспечения маршрутизатора Tenda F3, позволяющая нарушителю оказать воздействие на целостность защищаемой информации

EPSS

Процентиль: 11%
0.00207
Низкий

5.1 Medium

CVSS4

4.3 Medium

CVSS3

Дефекты

CWE-1021