CVE Catalog

CVE-2015-5995

Critical
Published: Translated: NVD NIST

Summary

Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 and Tenda N3 Wireless N150 devices allow remote attackers to obtain administrative access via a certain admin substring in an HTTP Cookie header.

Risk Assessment

Attackers can remotely take control of the devices, potentially leading to serious security breaches within the organization's network.

Recommendation

It is recommended to update the devices' firmware to the latest version and monitor access logs for unauthorized attempts.

Original NVD description (English source)

Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 and Tenda N3 Wireless N150 devices allow remote attackers to obtain administrative access via a certain admin substring in an HTTP Cookie header.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS