CVE-2015-5995

Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 and Tenda N3 Wireless N150 devices allow remote attackers to obtain administrative access via…

published December 31, 2015

CVSS
—
EPSS
19%
Percentile
97.3
In the wild
Unconfirmed
What it is

⚠️ A sneaky cookie could give attackers admin access! With a special substring in the HTTP Cookie, your Mediabridge and Tenda devices might just let the bad guys in. 😱 Think of it like a hotel front desk that hands out master keys without really checking who’s asking — one little detail can unlock everything! 🏨🎉 If an attacker exploits this vulnerability, they could waltz in and take complete control by accessing the device's admin settings. This means they could change configurations, monitor network traffic, or even compromise connected devices. The potential for chaos is mind-blowingly simple!

Put simply

Think of it like a hotel front desk that hands out master keys without really checking who’s asking — one little detail can unlock everything! 🏨🎉 This vulnerability arises from a flaw in the HTTP Cookie header handling, allowing attackers to manipulate the cookie to gain unauthorized administrative access to the affected devices without any credentials required. 📡⚡

What to do

If an attacker exploits this vulnerability, they could waltz in and take complete control by accessing the device's admin settings. This means they could change configurations, monitor network traffic, or even compromise connected devices. The potential for chaos is mind-blowingly simple! To shield your network from this threat, it's crucial to upgrade the firmware on your Mediabridge and Tenda devices to the latest version available. Additionally, consider implementing strict firewall rules and monitoring your network for any suspicious activity. 🛡️ You've got this! By taking these steps, you'll be one step closer to securing your devices. Keep up the great work! 💪✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.19065 · 97.3th percentile
Published
2015-12-31T02:00Z
EPSS history
Timeline
  • 31 DEC 02:00Z
    Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 and Tenda N3 Wireless N150 devices allow remote attackers to obtain administrative access via…
    cvelistv5