CVE-2026-38571 Details

A vulnerability in the Tenda Wireless N300 Easy Setup Router, Model F3, running firmware V603, allows a physically proximate attacker to access stored WPA2 credentials in cleartext and to read or write arbitrary memory through the unauthenticated UART debug console. The WPA2 credentials are exposed via the boot log and NVRAM, while the memory access is facilitated by the console's register commands. This vulnerability arises from cleartext storage of sensitive information and missing authentication for critical functions, with potential impacts including unauthorized access to in-memory secrets, modification of the device's running state, and exploitation of the device's control flow, possibly leading to arbitrary code execution.

No vendor fix is available. It is recommended to avoid deploying the device where untrusted parties can access the UART header, as physical access is equivalent to full credential compromise.