CVEs-PoC/2014/CVE-2014-5246.md

CVE-2014-5246

Description

The Shenzhen Tenda Technology Tenda A5s router with firmware 3.02.05_CN allows remote attackers to bypass authentication and gain administrator access by setting the admin:language cookie to zh-cn.

POC

Reference

• http://packetstormsecurity.com/files/127905/Tenda-A5s-Router-Authentication-Bypass.html
• http://packetstormsecurity.com/files/127905/Tenda-A5s-Router-Authentication-Bypass.html

Github

• https://github.com/5ecurity/CVE-List
• https://github.com/anquanquantao/iwantacve