What is the severity of CVE-2023-29681?

CVE-2023-29681 is classified as a high severity vulnerability due to the potential for an authenticated attacker to intercept sensitive information.

How do I fix CVE-2023-29681?

To mitigate CVE-2023-29681, update the Tenda N301 firmware to a version that does not use cleartext communication for sensitive data.

What devices are affected by CVE-2023-29681?

CVE-2023-29681 affects Tenda N301 firmware version 12.02.01.61_multi and earlier.

What impact does CVE-2023-29681 have on my device?

CVE-2023-29681 allows authenticated attackers on the local network to obtain passwords transmitted in cleartext.

Can CVE-2023-29681 be exploited remotely?

CVE-2023-29681 requires the attacker to have access to the local area network, hence it cannot be exploited remotely.

Vulnerability/
CVE-2023-29681

medium

5.7

CWE

319

1/5/2023

30/1/2025

CVE-2023-29681

First published: Mon May 01 2023(Updated: )

Cleartext Transmission in cookie:ecos_pw: in Tenda N301 v6.0, firmware v12.03.01.06_pt allows an authenticated attacker on the LAN or WLAN to intercept communications with the router and obtain the password.

Credit: cve@mitre.org cve@mitre.org

Affected Software	Affected Version	How to fix
All of
Tenda N301	=12.02.01.61_multi
Tenda N301 Firmware	=6.0
Tenda N301	=12.02.01.61_multi
Tenda N301 Firmware	=6.0

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2023-29681?
CVE-2023-29681 is classified as a high severity vulnerability due to the potential for an authenticated attacker to intercept sensitive information.
How do I fix CVE-2023-29681?
To mitigate CVE-2023-29681, update the Tenda N301 firmware to a version that does not use cleartext communication for sensitive data.
What devices are affected by CVE-2023-29681?
CVE-2023-29681 affects Tenda N301 firmware version 12.02.01.61_multi and earlier.
What impact does CVE-2023-29681 have on my device?
CVE-2023-29681 allows authenticated attackers on the local network to obtain passwords transmitted in cleartext.
Can CVE-2023-29681 be exploited remotely?
CVE-2023-29681 requires the attacker to have access to the local area network, hence it cannot be exploited remotely.

collector/nvd-latest
agent/type
agent/severity
agent/references
agent/weakness
agent/first-publish-date
agent/description
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/source
agent/author
agent/event
agent/softwarecombine
agent/tags
collector/nvd-api
source/NVD
agent/software-canonical-lookup
agent/software-canonical-lookup-request
collector/nvd-index
vendor/tenda
canonical/tenda n301
version/tenda n301/12.02.01.61_multi
canonical/tenda n301 firmware
version/tenda n301 firmware/6.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.