CVE-2018-25316 | Tenda W308R v2 5.07.48 DNS Setting Endpoint /goform/AdvSetDns authentication spoofing (Exploit 44373 / EDB-44373)

A vulnerability categorized as critical has been discovered in Tenda W308R v2 5.07.48. Affected by this vulnerability is an unknown functionality of the file /goform/AdvSetDns of the component DNS Setting Endpoint. The manipulation results in authentication bypass by spoofing.

This vulnerability was named CVE-2018-25316. The attack may be performed from remote. In addition, an exploit is available.