CVE-2026-115797
LowCVSS 3.7Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
A weakness was identified in Tenda F6 version 12.02.01.73 affecting an unknown function of the web management interface. Manipulating the ecos_pw argument can lead to cleartext transmission of sensitive information. The attack may be launched remotely, is characterized by high complexity, and a public exploit is available.
Risk Assessment
Sensitive data such as passwords could be intercepted by an attacker on the network, potentially enabling unauthorized access to the device or network.
Recommendation
Update Tenda F6 firmware to a version containing the fix and avoid transmitting credentials over insecure channels.
Other vulnerabilities in Tenda F6
Original NVD description (English source)
A weakness has been identified in Tenda F6 12.02.01.73. Affected is an unknown function of the component Web Management Interface. Executing a manipulation of the argument ecos_pw can lead to cleartext transmission of sensitive information. The attack may be launched remotely. This attack is characterized by high complexity. The exploitability is told to be difficult. The exploit has been made available to the public and could be used for attacks.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS