Description
Tenda是一家中国的网络设备制造商，成立于1999年，专注于提供各种网络产品，包括路由器、交换机、无线接入点和网络适配器等。Tenda路由器以其高性价比、易于设置和良好的用户体验而受到消费者的欢迎。Tenda路由器 /cgi-bin/DownloadCfg接口处存在信息泄露漏洞，攻击者可通过此漏洞获取路由器后台账号密码。
Tenda-路由器 /cgi-bin/DownloadCfg/RouterCfm.jpg 信息泄露漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/emadshanab/nuclei-templates852/blob/main/Tenda%20%E8%B7%AF%E7%94%B1%E5%99%A8%20DownloadCfg%20%E4%BF%A1%E6%81%AF%E6%B3%84%E9%9C%B2%E6%BC%8F%E6%B4%9E.yaml
https://blog.csdn.net/fushuang333/article/details/135608560
https://cn-sec.com/archives/2453031.html
https://cve.imfht.com/poc_detail/cf0787b361d52409c3fc4aebfae672be8865c5bd
https://nvd.nist.gov/vuln/detail/CVE-2026-30140
https://mondoo.com/vulnerability-intelligence/vulnerability/CVE-2026-30140
https://access.redhat.com/security/cve/cve-2026-30140
https://www.sentinelone.com/vulnerability-database/cve-2026-30140/
https://vuldb.com/vuln/349853