Vulnerability Description
Cleartext storage and exposure of WPA2 credentials, and missing authentication on the rr/wr memory read/write commands, in the unauthenticated UART debug console of the Tenda N300 F3 (V603) allow a physically proximate attacker to obtain stored WPA2 credentials in cleartext and to read or write arbitrary memory via the serial console.
References
FAQ
What is CVE-2026-38571?
CVE-2026-38571 is a documented vulnerability. Cleartext storage and exposure of WPA2 credentials, and missing authentication on the rr/wr memory read/write commands, in the unauthenticated UART debug console of the Tenda N300 F3 (V603) allow a ph...
How severe is CVE-2026-38571?
CVSS scoring is not yet available for CVE-2026-38571. Check NVD for updates.
Is there a patch for CVE-2026-38571?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.