CVE-2021-47802CWE-306

Tenda D151 & D301 - Configuration Download

High · published January 21, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
52.7
In the wild
Unconfirmed
What it is

⚡ An unauthenticated request is all it takes to snag your router's configuration! With Tenda D151 and D301 routers, attackers can easily grab sensitive admin credentials without breaking a sweat. 🔥 Think of it like leaving your front door wide open with a sign saying, 'All welcome to check my stuff!' This vulnerability allows attackers to download configuration files just like someone casually walking in and helping themselves to your personal belongings. If exploited, an attacker could gain full access to your router settings, potentially allowing them to change Wi-Fi passwords, reroute traffic, or even eavesdrop on your network. It's a gateway for malicious activity that could compromise not only your personal data but also the security of all devices connected to your router.

Put simply

Think of it like leaving your front door wide open with a sign saying, 'All welcome to check my stuff!' This vulnerability allows attackers to download configuration files just like someone casually walking in and helping themselves to your personal belongings. This vulnerability exists because the Tenda D151 and D301 routers allow unauthorized access to the /goform/getimage endpoint, letting remote attackers retrieve router configuration files without any authentication checks.

What to do

If exploited, an attacker could gain full access to your router settings, potentially allowing them to change Wi-Fi passwords, reroute traffic, or even eavesdrop on your network. It's a gateway for malicious activity that could compromise not only your personal data but also the security of all devices connected to your router. To safeguard your network, update your Tenda router firmware to the latest version that addresses this vulnerability. Additionally, review your router's configuration settings to ensure no sensitive information is exposed. Implementing strong passwords for both the router interface and Wi-Fi network is also crucial. You've got this! With these steps, you'll be securing your router and keeping your network safe in no time. 🛡️

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00702 · 52.7th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-01-21T17:27Z
EPSS history
Timeline
  • 21 JAN 17:27Z
    Tenda D151 & D301 - Configuration Download
    cvelistv5