CVE-2026-22079

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-22079", "assignerOrgId": "66834db9-ab24-42b4-be80-296b2e40335c", "state": "PUBLISHED", "assignerShortName": "CERT-In", "dateReserved": "2026-01-06T07:52:50.901Z", "datePublished": "2026-01-09T11:02:50.926Z", "dateUpdated": "2026-01-09T15:15:27.815Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "300Mbps Wireless Router F3 and N300 Easy Setup Router", "vendor": "Tenda", "versions": [{"status": "affected", "version": "F3 v3.0 Firmware V12.01.01.41"}, {"status": "affected", "version": "F3 v3.0 Firmware V12.01.01.42"}, {"status": "affected", "version": "F3 v3.0 Firmware V12.01.01.48"}, {"status": "affected", "version": "F3 v3.0 Firmware V12.01.01.52"}, {"status": "affected", "version": "F3 v3.0 Firmware V12.01.01.55"}, {"status": "affected", "version": "F3 v4.0 Firmware V03.03.01.40"}]}], "credits": [{"lang": "en", "type": "finder", "value": "This vulnerability is reported by Deven Lunkad, Swaroop Dora, Naziya Aslam, and S. Venkatesan from IoT Security Research Lab, Indian Institute of Information Technology, Allahabad, India."}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup Router) due to the plaintext transmission of login credentials during the initial login or post-factory reset setup through the web-based administrative interface. An attacker on the same network could exploit this vulnerability by intercepting network traffic and capturing the credentials transmitted in plaintext.<br><br>Successful exploitation of this vulnerability could allow the attacker to obtain sensitive information and gain unauthorized access to the targeted device.<br>"}], "value": "This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup Router) due to the plaintext transmission of login credentials during the initial login or post-factory reset setup through the web-based administrative interface. An attacker on the same network could exploit this vulnerability by intercepting network traffic and capturing the credentials transmitted in plaintext.\n\nSuccessful exploitation of this vulnerability could allow the attacker to obtain sensitive information and gain unauthorized access to the targeted device."}], "impacts": [{"capecId": "CAPEC-117", "descriptions": [{"lang": "en", "value": "CAPEC-117 Interception"}]}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "ADJACENT", "baseScore": 8.7, "baseSeverity": "HIGH", "exploitMaturity": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-319", "description": "CWE-319 Cleartext Transmission of Sensitive Information", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "66834db9-ab24-42b4-be80-296b2e40335c", "shortName": "CERT-In", "dateUpdated": "2026-01-09T11:25:36.253Z"}, "references": [{"tags": ["third-party-advisory"], "url": "https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0004"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Apply appropriate updates as mentioned by the vendor:<br><a target=\"_blank\" rel=\"nofollow\" href=\"https://www.tendacn.com/in/material/show/724624313163845\">https://www.tendacn.com/in/material/show/724624313163845</a><br><br>"}], "value": "Apply appropriate updates as mentioned by the vendor:\n https://www.tendacn.com/in/material/show/724624313163845"}], "source": {"discovery": "UNKNOWN"}, "title": "Cleartext Transmission Vulnerability in Tenda Wireless Routers", "x_generator": {"engine": "Vulnogram 0.5.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-01-09T15:15:16.081528Z", "id": "CVE-2026-22079", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-09T15:15:27.815Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-22079", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-01-09T15:15:16.081528Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-09T15:15:23.369Z"}}], "cna": {"title": "Cleartext Transmission Vulnerability in Tenda Wireless Routers", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "This vulnerability is reported by Deven Lunkad, Swaroop Dora, Naziya Aslam, and S. Venkatesan from IoT Security Research Lab, Indian Institute of Information Technology, Allahabad, India."}], "impacts": [{"capecId": "CAPEC-117", "descriptions": [{"lang": "en", "value": "CAPEC-117 Interception"}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.7, "Automatable": "NOT_DEFINED", "attackVector": "ADJACENT", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Tenda", "product": "300Mbps Wireless Router F3 and N300 Easy Setup Router", "versions": [{"status": "affected", "version": "F3 v3.0 Firmware V12.01.01.41"}, {"status": "affected", "version": "F3 v3.0 Firmware V12.01.01.42"}, {"status": "affected", "version": "F3 v3.0 Firmware V12.01.01.48"}, {"status": "affected", "version": "F3 v3.0 Firmware V12.01.01.52"}, {"status": "affected", "version": "F3 v3.0 Firmware V12.01.01.55"}, {"status": "affected", "version": "F3 v4.0 Firmware V03.03.01.40"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "Apply appropriate updates as mentioned by the vendor:\n https://www.tendacn.com/in/material/show/724624313163845", "supportingMedia": [{"type": "text/html", "value": "Apply appropriate updates as mentioned by the vendor:<br><a target=\"_blank\" rel=\"nofollow\" href=\"https://www.tendacn.com/in/material/show/724624313163845\">https://www.tendacn.com/in/material/show/724624313163845</a><br><br>", "base64": false}]}], "references": [{"url": "https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0004", "tags": ["third-party-advisory"]}], "x_generator": {"engine": "Vulnogram 0.5.0"}, "descriptions": [{"lang": "en", "value": "This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup Router) due to the plaintext transmission of login credentials during the initial login or post-factory reset setup through the web-based administrative interface. An attacker on the same network could exploit this vulnerability by intercepting network traffic and capturing the credentials transmitted in plaintext.\n\nSuccessful exploitation of this vulnerability could allow the attacker to obtain sensitive information and gain unauthorized access to the targeted device.", "supportingMedia": [{"type": "text/html", "value": "This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup Router) due to the plaintext transmission of login credentials during the initial login or post-factory reset setup through the web-based administrative interface. An attacker on the same network could exploit this vulnerability by intercepting network traffic and capturing the credentials transmitted in plaintext.<br><br>Successful exploitation of this vulnerability could allow the attacker to obtain sensitive information and gain unauthorized access to the targeted device.<br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-319", "description": "CWE-319 Cleartext Transmission of Sensitive Information"}]}], "providerMetadata": {"orgId": "66834db9-ab24-42b4-be80-296b2e40335c", "shortName": "CERT-In", "dateUpdated": "2026-01-09T11:25:36.253Z"}}}, "cveMetadata": {"cveId": "CVE-2026-22079", "state": "PUBLISHED", "dateUpdated": "2026-01-09T15:15:27.815Z", "dateReserved": "2026-01-06T07:52:50.901Z", "assignerOrgId": "66834db9-ab24-42b4-be80-296b2e40335c", "datePublished": "2026-01-09T11:02:50.926Z", "assignerShortName": "CERT-In"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "300Mbps Wireless Router F3 and N300 Easy Setup Router", "vendor": "Tenda", "versions": [{"status": "affected", "version": "F3 v3.0 Firmware V12.01.01.41"}, {"status": "affected", "version": "F3 v3.0 Firmware V12.01.01.42"}, {"status": "affected", "version": "F3 v3.0 Firmware V12.01.01.48"}, {"status": "affected", "version": "F3 v3.0 Firmware V12.01.01.52"}, {"status": "affected", "version": "F3 v3.0 Firmware V12.01.01.55"}, {"status": "affected", "version": "F3 v4.0 Firmware V03.03.01.40"}]}], "source": "vdisclose@cert-in.org.in"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup Router) due to the plaintext transmission of login credentials during the initial login or post-factory reset setup through the web-based administrative interface. An attacker on the same network could exploit this vulnerability by intercepting network traffic and capturing the credentials transmitted in plaintext.\n\nSuccessful exploitation of this vulnerability could allow the attacker to obtain sensitive information and gain unauthorized access to the targeted device."}, {"lang": "es", "value": "Esta vulnerabilidad existe en los routers inal\u00e1mbricos Tenda (Router Inal\u00e1mbrico de 300Mbps F3 y Router de F\u00e1cil Configuraci\u00f3n N300) debido a la transmisi\u00f3n en texto plano de las credenciales de inicio de sesi\u00f3n durante el inicio de sesi\u00f3n inicial o la configuraci\u00f3n posterior al restablecimiento de f\u00e1brica a trav\u00e9s de la interfaz administrativa basada en web. Un atacante en la misma red podr\u00eda explotar esta vulnerabilidad interceptando el tr\u00e1fico de red y capturando las credenciales transmitidas en texto plano.\n\nLa explotaci\u00f3n exitosa de esta vulnerabilidad podr\u00eda permitir al atacante obtener informaci\u00f3n sensible y conseguir acceso no autorizado al dispositivo objetivo."}], "id": "CVE-2026-22079", "lastModified": "2026-06-17T10:19:26.567", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "ADJACENT", "availabilityRequirement": "NOT_DEFINED", "baseScore": 8.7, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "vdisclose@cert-in.org.in", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-22079", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-01-09T15:15:16.081528Z", "version": "2.0.3"}}]}, "published": "2026-01-09T11:15:50.617", "references": [{"source": "vdisclose@cert-in.org.in", "url": "https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0004"}], "sourceIdentifier": "vdisclose@cert-in.org.in", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-319"}], "source": "vdisclose@cert-in.org.in", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-18T07:24:52.379583+00:00", "value": {"mitigation_remediation": ["Apply the latest firmware update released by Tenda as per the vendor\u2019s instructions.", "After updating, ensure the router\u2019s administrative interface uses HTTPS or disable remote HTTP access.", "Change the default administrator credentials to strong, unique passwords."], "summary": {"action": "Immediate Patch", "impact": "Sensitive information exposure and unauthorized device access"}, "threat_synthesis": {"affected_systems": "Affected models include Tenda\u2019s 300\u202fMbps Wireless Router F3 and N300 Easy Setup Router. No additional version details are provided, so all firmware versions shipping these devices may be vulnerable until patched.", "description_and_impact": "The vulnerability arises from the transmission of login credentials in cleartext during the initial configuration of Tenda 300Mbps Wireless Router F3 and N300 Easy Setup Router. This allows an attacker on the same local network to capture administrator usernames and passwords, resulting in potential unauthorized access to the device and exposure of sensitive information. The weakness is a cleartext transmission flaw, classified as CWE\u2011319.", "risk_and_exploitability": "The CVSS score of 8.7 places the issue in the high severity category, yet the EPSS score is below 1\u202f%, indicating a low probability of exploitation at present. The vendor has not listed this flaw in CISA\u2019s KEV catalog, suggesting limited known exploitation. The likely attack vector is local network traffic interception, meaning only attackers physically present or having network access to the router\u2019s LAN can leverage the flaw, and they must capture unencrypted HTTP traffic during setup."}}}}, "created": "2026-01-09T13:23:31.167834+00:00", "updated": "2026-04-18T07:30:36.033368+00:00", "vendors": ["tenda", "tenda$PRODUCT$f3", "tenda$PRODUCT$n300"]}