CVE-2026-115797: Tenda F6 Web Management cleartext transmission
A weakness has been identified in Tenda F6 12.02.01.73. Affected is an unknown function of the component Web Management Interface. Executing a manipulation of the argument ecospw can lead to cleartext transmission of sensitive information. The attack may be launched remotely. This attack is characterized by high complexity. The exploitability is told to be difficult. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
Which deployments are known to be affected?
The affected product and version identified in the available information are Tenda F6 12.02.01.73. The issue is in an unspecified function of its Web Management Interface.
What does exploitation require?
An unauthenticated attacker can attempt exploitation remotely by manipulating the ecos_pw argument. Exploitation is assessed as high complexity and difficult, although public exploit information is available.
What is the expected impact?
Successful exploitation can result in cleartext transmission of sensitive information. No integrity or availability impact is identified in the supplied severity vector.