The vulnerability allows a physically proximate attacker to read and write arbitrary memory via the UART debug console due to missing authentication and to obtain stored WPA2 credentials in cleartext. This exposes sensitive network credentials and can lead to unauthorized configuration changes or compromise of the device’s firmware. The weakness involves improper handling of authentication and insecure storage of sensitive information, which can undermine both confidentiality and integrity of the system.

The affected product is the Tenda N300 F3 (V603), a consumer Wi‑Fi router released by Tenda. No other vendor or product versions are listed as impacted in the available data.

The exploit requires physical proximity to the device’s serial interface. However, once accessed, the attacker can read or write any memory location, potentially enabling arbitrary code execution or data exfiltration. The CVSS score is not provided, and there is no EPSS availability, but the lack of authentication and cleartext credential storage vulnerability. It is not listed in the CISA KEV catalog.