CVE-2026-115797 Details
Description
A weakness has been identified in Tenda F6 12.02.01.73. Affected is an unknown function of the component Web Management Interface. Executing a manipulation of the argument ecos_pw can lead to cleartext transmission of sensitive information. The attack may be launched remotely. This attack is characterized by high complexity. The exploitability is told to be difficult. The exploit has been made available to the public and could be used for attacks.
A vulnerability in the Tenda F6 router's web management interface, specifically in version 12.02.01.73, allows for the cleartext transmission of sensitive information. This issue arises from an unknown function that can be manipulated by altering the ecos_pw argument. The vulnerability can be exploited remotely, but it requires a high level of complexity, making exploitation difficult.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 23, 2026CISA-ADP
Assessed Oct 29, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/0xWKZER/tenda-f6-vulnerabilities/edit/main/02-Cleartext_Transmission.md | [email protected] | Exploit |
| https://vuldb.com/cve/CVE-2026-115797 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/submit/1022076 | [email protected] | Permission Required |
| https://vuldb.com/vuln/425975 | [email protected] | Permission Required |
| https://vuldb.com/vuln/425975/cti | [email protected] | Content Wall |
| https://www.tenda.com.cn/ | [email protected] | Vendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-310 | Cryptographic Issues | [email protected] |
| CWE-319 | Cleartext Transmission of Sensitive Information | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Tenda F6 | 12.02.01.73 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 29, 2026 | CVE Modified | CISA-ADP |
| Oct 23, 2026 | New CVE Received | [email protected] |