Tenda - Fh303/a300 - CRITICAL - CVE-2018-25318. The Tenda FH303/A300 firmware version V5.07.68_EN exposes a session weakness that may enable unauthorized individuals to alter DNS settings. This vulnerability arises from inadequate cookie validation, allowing attackers to utilize specially crafted admin cookies to send GET requests to the /goform/AdvSetDns endpoint. Consequently, this can lead to the redirection of user traffic to potentially harmful websites, emphasizing the need for robust security measures and timely updates. BADGES: 👾 EXPLOITED | 🟡 PoC | SecurityVulnerability.io