A vulnerability identified as critical has been detected in Tenda W3002R, A302 and W309R 5.07.64_en. Affected by this issue is some unknown functionality of the file /goform/AdvSetDns. This manipulation causes authentication bypass by spoofing.
The identification of this vulnerability is CVE-2018-25317. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
