Unauthorized access to multiple Tenda N300 v2 sites (second change password)

Unauthorized access to multiple Tenda N300 v2 sites (second change password)

By viewing the data submitted by post, we can see that some of the configuration files are not added with permissions, and you can directly access the pages ....

 

You can find the DHCP customer list, route information, route logs, and the most important thing is that you can change the password in seconds, that is, kick other users offline...

Lan_dhcp_clients.asp
 

Mac_clone.asp
 

Wireless_security.asp
 

System_log.asp
 

 

Solution:

Enhanced Verification :)